Splunk Search for Most viewed dashboards Copy
index="_internal" source=*access.log user!="-" */app/* | rex field=_raw "/en-US/app/(?<app>[^/]+)/(?<dashboard>[^?/\s]+)\sHTTP" | stats count by dashboard, app | rename dashboard as "Dashboard Title", app as "App", count as Visits | sort - Visits | head 10
0 comments