Differences

This shows you the differences between two versions of the page.

--- splunk-queries [2024/03/15 11:52] – [Count Events per Index] baumi
+++ splunk-queries [2024/03/15 11:55] (current) – [Count Events per Index] baumi
@@ Line 10: / Line 10: @@
 <code>
 | tstats count where index=<indexname> by _time host span=1h prestats=true
-| timechart cound span=1h
+| timechart count span=1h
 | addtotals
 </code>