How to show count of events per day dbconnect

[kbcuait]

Hi, here's my search, which includes a conversion from epoch time to a Y-d-m time format:

| dbquery "DBNAME" "SELECT useraction FROM usertable" | eval useraction=strftime(useraction,"%Y-%d-%m")

Now I'd like to see how many events occurred for each day

[kbcuait · Accepted solution]

Ok I think I answered my own question - was simpler than I thought (must have just been missing something small):

| dbquery "DBNAME" "SELECT useraction FROM usertable" | eval useraction=strftime(useraction,"%Y-%d-%m") | stats count by useraction