Splunk AppDynamics

How to group similar referrers together?

Amr_Gamal
Explorer

Hello, 

In my EUM Dashboard, I want to add a pie chart of referrers so it appears as in the attached image 

for example, there is more than one value of google referrers.

I want to group referrers so that all referrers that contains google.com are considered one group (google referrer) and all contains (Facebook.com) has value of Facebook and so on .

I don't need to show distribution based on each unique value

How can I do this?

note: the used query as below

SELECT referrer, count(referrer) FROM web_session_records WHERE referrer IS NOT NULL

Thanks image.png

^ Edited by @Ryan.Paredez for readability.  

Labels (1)
Tags (1)
0 Karma

Morelz
Builder

Hi Amr

You can use the substring & Index ADQLfunctions.

Something like 

SELECT substring(referrer, 9, indexOf(referrer, '/', 3)-9), count(*) FROM web_session_records WHERE referrer IS NOT NULL

Might need to adjust a little bit 

Ciao

Get Updates on the Splunk Community!

Best Strategies to Optimize Observability Costs

 Join us on Tuesday, May 6, 2025, at 11 AM PDT / 2 PM EDT for an insightful session on optimizing ...

Fueling your curiosity with new Splunk ILT and eLearning courses

At Splunk Education, we’re driven by curiosity—both ours and yours! That’s why we’re committed to delivering ...

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...