I want to get a list of all users who had a particular event occur less than 30 days apart.
The events look roughly like this:
2018-05-03 09:14:41,173 INFO - [biscuitking@sesamestreet.com] - jsonResponse={ "responseHeader" : { "success" : "true", "serviceName" : "web-service", "resourceName" : "resource-name", "operationName" : "operation-name", "version" : "1.2.3", "transactionId" : "225b9c5b-384f-4e3a-bf3d-035ddb7cb45b", "duration" : "1234", "exitTimestamp" : "20180503 09:14:41.137 EDT", "messages" : [ { "code" : "UPDATE_SUCCESS", "message" : "The operation was successful" } ] }}
In this example, USER_NAME=biscuitking@sesamestreet.com . I want to find all of the users over the last 6 months where events with these fields...
resourceName=resource-name
operationName=operation-name
code=UPDATE_SUCCESS
... occur less than 30 days apart.
Thanks!
... View more
