Splunk Search

How do you list the pages visited for a particular session id?

qodeninja
Explorer

I'd like to get a list of sessions each with their page views and session durations like this:

Session12324 | Session Duration | /path/page/1 /path/page/2

Tags (2)
1 Solution

sdaniels
Splunk Employee
Splunk Employee

You should look at the transaction command. It will create a field for you call duration as well so you can see length of a particular session. Then create a table with specific fields you'd like to see.

http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/transaction

<your search> | transaction sessionID

View solution in original post

qodeninja
Explorer

sure, its log4j, looks like JSON, has RequestURI and SessionID as fields

0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

I think based on the answers below that you should get what you need right?

0 Karma

kristian_kolb
Ultra Champion

please provide some more info about the log file format you have, otherwise it'll be harder to be of help.

0 Karma

sdaniels
Splunk Employee
Splunk Employee

You should look at the transaction command. It will create a field for you call duration as well so you can see length of a particular session. Then create a table with specific fields you'd like to see.

http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/transaction

<your search> | transaction sessionID

qodeninja
Explorer

yep transaction is what I needed, thank you!

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...