| stats count
Set time period to be yesterday using timepicker
Hi @Fats120,
to better help you, you should share some additional info!
Then, do you want the time distribution for your previous day (as you said in the description) or for a larger period grouped by day (as you said in the title)?
Anyway, in the first case you should try something like this:
index=your_index earliest=-1d latest=now
| timechart count span=1h
In thesecond case, you should try something like this:
index=your_index earliest=-7d@d latest=@d
| timechart count span=1d
Ciao.
Giuseppe
Apologies for being so brief. I'm working on a glass table and I needed the events to be counted for the previous calendar day. So for each day, the visualization should show how many events were counted on the previous day.
Hi @Fats120,
if you want the total eventcount for the previous day, to use e.g. in a Single Value Panel, you could use something like this:
| metasearch index=your_index earliest=-1d latest=now
| stats count
Ciao.
Giuseppe
thanks!
Hi @Fats120,
if this asnwer solves your need, please, accept it for the other people of Community, otherwise, tell me how can I help you more.
good for you, see next time!
Ciao and happy splunking
Giuseppe
P.S.: Karma Points are appreciated 😉
I tried this code and an error came up 😞
How do I just collect data from the previous day and not right now. I only want to collect data from only the previous day each day and visualize it on my glass table.
Hi @Fats120,
as @ITWhisperer hinted, please try this:
| metasearch index=your_index earliest=-1d@d latest=@d
| stats count
Ciao.
Giuseppe
What was the error?
For just the previous day, use
... earliest=-1d@d latest=@d