Splunk Search

How to create chart using web access logs as source and list all URIs

pdave83
New Member

How do I create a chart using web access logs as a source ?
I want a list of all URI's which shows counts of error codes 40* and 50*

I am using below splunk search for getting list of URI with error codes other than 200 and 300:

source="web_access_log*" ( (NOT (( "HTTP/1.1\" 200") OR ( "HTTP/1.0\" 200") OR ( "HTTP/1.1\" 302") OR ( "HTTP/1.1\" 304")) )) 

I want to create chart or stats which list all URI's on left and shows count of 400's and 500's error codes on right.

Any help would be appreciated.

0 Karma

pdave83
New Member

I need to extract URL's and error code counts from unformatted data

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...