Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

How can I filter the top / head values by a summed field (e.g. day)?

$
0
0

I have a search that returns the number of 'views' of a product by day using a 'search xyz |bucket _time span=1d |stats sum(product_views) by _time,product_name' search.

I'd like to limit the search to the top 10 products by total views each day. How can I do this?

If I could add a 'rank' field by day, I'd be able to use a where clause but I can't figure out how to do that.


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>