BOB: Business Objects Board
Not endorsed by or affiliated with SAP

Register | Login 

Want to sponsor BOB? 
Want to sponsor BOB? (Opens a new window)  

General Notice: Upcoming Events: GA ASUG summer chapter: Jun 10, MI ASUG summer chapter: Jun 16.

How to get max count for every one hour?


 
Search this topic... | Search General Discussion... | Search Box
Register or Login to Post    Forum Index -> General Discussion  Previous TopicPrint TopicNext Topic
Author Message
Kinjal
Forum Member
Forum Member



Joined: 24 May 2016

Posts: 3



PostPosted: Tue May 24, 2016 6:29 am 
Post subject: How to get max count for every one hour?

Hi, I'm trying to get the system with a most number of logs (usage) for every 1 hour. I did a hunt for
eventtype="centralizedlog" | bin span=1h _time | eval date_string=strftime(_time,"%d/%m/%y %H:%M:00") | stats count as count by date_string, System_ID |eventstats max(count) as maxcount by date_string | where maxcount==count
Which outputs me a table with as shown below.
Time Highest Usage max count
23/4/2015 0900 systemA 20000
23/4/2015 1000 systemB 30000
However, I confidence to get a chart of sum over time whereby each bar is extreme count during the 1st hr window and each bar has dissimilar colors, depending on the kind of system. (Now, all the bars in the chart are the similar color, i don't know what is the matching system)

I'm fairly new to Splunk Enterprise. Any help will be significantly appreciated.

Thank you!
Back to top
Marek Chladny
Forum Advocate
Forum Advocate



Joined: 27 Nov 2003

Posts: 18700
Location: Bratislava


flag
PostPosted: Tue May 24, 2016 6:51 am 
Post subject: Re: How to get max count for every one hour?

Welcome to Bicon_mrgreen.gifB!

Can you please explain how is your question related to SAP Business Objects?


Thank you.

_________________
BO: BI 4.0, 4.1 | XI 3, 3.1 | XI r2 | 6.x | 5.x
DB: Oracle, MS SQL Server, DB2, Teradata, Netezza
HW: Win, Linux and AIX servers
www.perpendulum.com

Latest Blog Posts
• 2013-07-16 Number of reports in a WebI document
• 2013-04-01 Optional prompts in a universe
• 2012-06-08 Calendar table script for Oracle
Back to top
Display posts from previous:   
Register or Login to Post    Forum Index -> General Discussion  Previous TopicPrint TopicNext Topic
Page 1 of 1 All times are GMT - 5 Hours
 
Jump to:  

Index | About | FAQ | RAG | Privacy | Search |  Register |  Login 

Get community updates via Twitter:

Not endorsed by or affiliated with SAP
Powered by phpBB © phpBB Group
Generated in 0.0135 seconds using 18 queries. (SQL 0.0030 Parse 0.0006 Other 0.0099)
CCBot/2.0 (http://commoncrawl.org/faq/)
Hosted by ForumTopics.com | Terms of Service
phpBB Customizations by the phpBBDoctor.com
Shameless plug for MomentsOfLight.com Moments of Light Logo