Splunk Search

How to fetch the best business week-day for month of September ?

rajakabdual
New Member

Please help me with my search:

index=sales sourcetype=csv  source= sales_new.csv
Tags (1)
0 Karma

kmaron
Motivator
index=sales sourcetype=csv source= sales_new.csv date_month=september date_wday IN ("monday", "tuesday", "wednesday", "thursday", "friday")
| stats sum(sales) as dailysales by date_mday
| sort - dailysales limit=1

This will give you one single day with the most sales that is a weekday.

0 Karma

TISKAR
Builder

Hello,

And if you try this,

index=sales sourcetype=csv source= sales_new.csv date_month=september
| timechart span=1d count

Best

0 Karma

deepashri_123
Motivator

Hey rajakabdual,

Can u try the following query:

index=sales sourcetype=csv source= sales_new.csv earliest=-1mon@mon
| timechart span=1d count

Let me know if this helps!!

0 Karma

somesoni2
Revered Legend

When you do say a business day is "best"? Any specific field that you sum/count?

0 Karma

skoelpin
SplunkTrust
SplunkTrust

Assuming you want the highest count per day over a month period. Try this

 index=sales sourcetype=csv  source= sales_new.csv
| timechart span=1d count
0 Karma

rajakabdual
New Member

Hi skoelpin, thanks for answering but my query is i need only September month business weekdays only

0 Karma

adonio
Ultra Champion

please share some more love so we can better assist you
do you have time fields? a little sample data will help

0 Karma

rajakabdual
New Member

yes adonio, here some of my time fields are date_wday ,date_month

0 Karma
Get Updates on the Splunk Community!

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Community Content Calendar, October Edition

Welcome to the October edition of our Community Spotlight! The Splunk Community is a treasure trove of ...