search string to find domain hits per minute over a certain time range.

Posts: 1
216     0



We wish to have a search string to get hits per domain per hour (or minute or second)?

I have found the string below regarding hits per specific domain. How to add to this hits per hour?


index=ib_dns_summary report=si_dns_requested_domain display_name=”External” FQDN="" OR FQDN =""| rex "^(?:[^\.\n]*\.){5}(?P<DOMAINNAME>\w+\.\w+)" |stats sum(COUNT) as FQDN_TOTAL by FQDN, DOMAINNAME| sort DOMAINNAME | stats sum(FQDN_TOTAL) as "TOTAL HITS" by DOMAINNAME


Thanks to all,

Showing results for 
Search instead for 
Did you mean: 

Recommended for You