Splunk Search

How to fetch the best business week-day for month of September ?

rajakabdual
New Member

Please help me with my search:

index=sales sourcetype=csv  source= sales_new.csv
Tags (1)
0 Karma

kmaron
Motivator
index=sales sourcetype=csv source= sales_new.csv date_month=september date_wday IN ("monday", "tuesday", "wednesday", "thursday", "friday")
| stats sum(sales) as dailysales by date_mday
| sort - dailysales limit=1

This will give you one single day with the most sales that is a weekday.

0 Karma

TISKAR
Builder

Hello,

And if you try this,

index=sales sourcetype=csv source= sales_new.csv date_month=september
| timechart span=1d count

Best

0 Karma

deepashri_123
Motivator

Hey rajakabdual,

Can u try the following query:

index=sales sourcetype=csv source= sales_new.csv earliest=-1mon@mon
| timechart span=1d count

Let me know if this helps!!

0 Karma

somesoni2
Revered Legend

When you do say a business day is "best"? Any specific field that you sum/count?

0 Karma

skoelpin
SplunkTrust
SplunkTrust

Assuming you want the highest count per day over a month period. Try this

 index=sales sourcetype=csv  source= sales_new.csv
| timechart span=1d count
0 Karma

rajakabdual
New Member

Hi skoelpin, thanks for answering but my query is i need only September month business weekdays only

0 Karma

adonio
Ultra Champion

please share some more love so we can better assist you
do you have time fields? a little sample data will help

0 Karma

rajakabdual
New Member

yes adonio, here some of my time fields are date_wday ,date_month

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...