Splunk Search

Line graph of URL hits based on http code over time

nirmalya2006
Path Finder

Hi All

I have 2 fields extracted -
URL as page and HTTP Response code as ResponseCode
I want to created a chart having multiple lines, each line showing the count of each different URLs having response code 200 over a period of time, maybe hourly or daily.
How can I create the query for that.

I did the below query

| chart count over ResponseCode by page usenull=f useother=f | where ResponseCode = 200

But I am unable to fit in the _time in the query to chart it in the x-axis.
Can someone help me to get _time in x-axis and show the count of 200 ResponseCodes based on the multiple pages

Thanks

Tags (2)
0 Karma
1 Solution

sundareshr
Legend

Try this.

... | where ResponseCode = 200 | timechart span=1h count by page limit=0 

View solution in original post

sundareshr
Legend

Try this.

... | where ResponseCode = 200 | timechart span=1h count by page limit=0 

nirmalya2006
Path Finder

This helped not only the one in the question, but another of my query also.
Thank you very much..

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...