Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Cumulative Distinct over time from the start of the selected time range

$
0
0
Hi, I need to find out distinct number of users over time per hour. I have managed to reach the below query: | timechart span=1h dc(user_id) What the above query does is that, it finds distinct users for each one hour. So it returns: time . distinct_users 12:00 am - 152 1:00 am - 50 2:00 am - 64 and so on.. What I expect is, the counts should be always increasing. so at 2:00 am above, I expect distinct users from 12:00 am to 2:00am

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>