Other Usage

How can I get stats based on unique Id?

batham
Explorer

Hi folks,
below are the log snippet that I am working on to generate a report

dare=10-05-2023,uniquieId=123 ,Request body: {"name":"test123","id": "Id123"}
dare=10-05-2023,uniquieId=234 ,Request body: {"name":"test234","id": "Id234"}
dare=10-05-2023,uniquieId=345 ,Request body: {"name":"test123","id": "Id345"}
dare=10-05-2023,uniquieId=123 ,Response body: {"role":"1"}
dare=10-05-2023,uniquieId=234 ,Response body: {"role":"2"}
dare=10-05-2023,uniquieId=345 ,Response body: {"role":"1"}
....
....
....
.....

I want daily stats on name and role, how do I combine the result based on uniquieId .
as below

date                    test123         test234
10-05-2023           2                     1

Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Assuming you have already extracted the fields, try this

| chart count by dare name
0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...