eventcount - spanning over week

Splunk Search

I'm attempting to write a search using eventcount command. I want to graph the number of events in my index/sourcetype per day of a span of week. Can I use evencount for this? I'm not having much luck.

| eventcount summarize=false index=myindex sourcetype=mysourcetype | timechart span=1d count

Get Updates on the Splunk Community!

Deep Dive: Optimizing Telemetry Pipelines in Splunk Observability Cloud

In this session, we will peel back the layers of Splunk Observability Cloud’s cost-optimization features. ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Data Drivers: How We're Streaming Real-Time F1 Telemetry Directly into Splunk ...

Data Drivers: Every Lap Tells a Story The Spectacle Two F1 racing sims go head-to-head on the .conf26 show ...