Reporting

Need to pull the report of weekwise VPN users connected for past 19 weeks

deepaksreepadma
New Member

index=juniper host="XXXXXXX" | stats count by user | stats count as Users
This query gives output of total number of users connection for the whole time period.
Need help to pull the report for last three months with shows weekwise user data?

Tags (1)
0 Karma

to4kawa
Ultra Champion

sample:

| makeresults count=2
| streamstats count
| eval _time=if(count=2,relative_time(_time,"-3month"),relative_time(_time,"@d"))
| makecontinuous span=1d _time
| eval user=mvindex(split("ABC",""),random()%3)
| timechart span=1d count by user

| timewrap 1w

recommend:

index=juniper host="XXXXXXX"
| timechart span=1d count by user
| timewrap 1w

use appropriate time picker.

0 Karma

shivanshu1593
Builder

Try this. It should give you the required data.

index=juniper host="XXXXXXX" earliest=-90d latest=now() | timechart span=1w count by user

Thank you,
Shiv
###If you found the answer helpful, kindly consider upvoting/accepting it as the answer as it helps other Splunkers find the solutions to similar issues###
0 Karma

to4kawa
Ultra Champion

I don't know juniper log. What kind of log is it?

how about timechart span=1w?

0 Karma

shivanshu1593
Builder

@to4kawa, it contains the logs of your Virtual Private Network a.k.a VPN. Like which user is connecting to your organizations network via VPN, how many users are connected. Then VPNs are divided region wise, so you get different VPN usage analysis statistics region wise.

Thank you,
Shiv
###If you found the answer helpful, kindly consider upvoting/accepting it as the answer as it helps other Splunkers find the solutions to similar issues###
0 Karma

to4kawa
Ultra Champion

thanks @shivanshu1593
I wanted to make sure the questioner could respond.

0 Karma
Get Updates on the Splunk Community!

Don't wait! Accept the Mission Possible: Splunk Adoption Challenge Now and Win ...

Attention everyone! We have exciting news to share! We are recruiting new members for the Mission Possible: ...

Unify Your SecOps with Splunk Mission Control

In today’s post, I'm excited to share some recent Splunk Mission Control innovations. With Splunk Mission ...

Data Preparation Made Easy: SPL2 for Edge Processor

By now, you may have heard the exciting news that Edge Processor, the easy-to-use Splunk data preparation tool ...