You should look at the transaction command. It will create a field for you call duration as well so you can see length of a particular session. Then create a table with specific fields you'd like to see.
http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/transaction
<your search> | transaction sessionID
sure, its log4j, looks like JSON, has RequestURI and SessionID as fields
I think based on the answers below that you should get what you need right?
please provide some more info about the log file format you have, otherwise it'll be harder to be of help.
You should look at the transaction command. It will create a field for you call duration as well so you can see length of a particular session. Then create a table with specific fields you'd like to see.
http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/transaction
<your search> | transaction sessionID
yep transaction is what I needed, thank you!