Splunk Search

How can I create a report giving a number of counts per categories per week ?

stenou
New Member

I am struggling to create a report that would give number of counts per categories per week. Something that could be presented like:
alt text

Any idea ? Thank you !

0 Karma
1 Solution

marina_rovira
Contributor

Hi there!

I maybe need a little more of information, but I will try it anyway.

I've, recently, create somethign like this. I had two categories A and B, but try this for the categories:

| timechart span=7d count by categories

For getting the view that you want you have to go to "visualization" and choose the option "column".

If I missunderstand something or you need something else write it! :slightly_smiling_face:

View solution in original post

0 Karma

marina_rovira
Contributor

Hi there!

I maybe need a little more of information, but I will try it anyway.

I've, recently, create somethign like this. I had two categories A and B, but try this for the categories:

| timechart span=7d count by categories

For getting the view that you want you have to go to "visualization" and choose the option "column".

If I missunderstand something or you need something else write it! :slightly_smiling_face:

0 Karma

stenou
New Member

Thank you !

0 Karma

somesoni2
Revered Legend

I would suggest to use span=1w to ensure capturing full week.

Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...