Splunk Search

Sales of each weekday by week number for month of December

rajakabdual
New Member

hi i need the December month sales by week number , given below i am sharing my index name and other fileds name also.

index= sales sourcetype=csv source= sales_new.csv and fields are date_month ,date_wday,Sales

Tags (1)
0 Karma
1 Solution

p_gurav
Champion

You can use :

 index= sales sourcetype=csv source= sales_new.csv date_month=december | timechart  span=1w count | eval day=strftime(_time,"%d") | eval week_number=floor(day/7)+1

View solution in original post

0 Karma

p_gurav
Champion

You can use :

 index= sales sourcetype=csv source= sales_new.csv date_month=december | timechart  span=1w count | eval day=strftime(_time,"%d") | eval week_number=floor(day/7)+1
0 Karma

rajakabdual
New Member

Hi P_gurav, thank you for the grate help its working fine and i am looking for the same.

0 Karma

deepashri_123
Motivator

Hey rajakbdual,

Can u try something like this:
index=sales sourcetype=csv source=sales_new.csv date_month=december | timechart span=1w Sales

Let me know if this helps!!

0 Karma

rajakabdual
New Member

Hey deepashri,
sorry i am getting the error at |timechart span=1w Sales

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...