Max enquiries made in second and minute yesterday/last week/last month

Hi community,

Using v7.6

Is it possible to identify and display the max enquiries made in a second and the time this occurred yesterday. Result should be like below if possible

Time Count
23/04/2020 19:56:07 5

Is it possible to identify and display the max enquiries made in a minute and the time this occurred yesterday. Result should be like below if possible

Time Count
23/04/2020 12:46:00 234

Is it possible to identify and display the max enquiries made in a second and the time this occurred last week. Result should be like below if possible

Time Count
23/04/2020 19:56:07 5

Is it possible to identify and display the max enquiries made in a minute and the time this occurred last week. Result should be like below if possible

Time Count
23/04/2020 12:46:00 234

Is it possible to identify and display the max enquiries made in a second and the time this occurred last month. Result should be like below if possible

Time Count
23/04/2020 19:56:07 5

Is it possible to identify and display the max enquiries made in a minute and the time this occurred last month. Result should be like below if possible

Time Count
23/04/2020 12:46:00 234

Thanks in advance

Hi @edwardj3!

Would make it easier to help if you can share some more about your data.

From what you've said, does a max aggregation do what you're looking for?

Hi @myasonik
Thanks for your suggestion and apologies for the lack of detail. The logs are for an enquiry service with 8-10m enquiries a month.

Within message, we are currently filtering for message: "action=save....." and a timestamp is also captured as "2020-05-27T06:38:39Z"

Hope this helps but get back in touch if you need more detail.

Sounds like a max aggregation might work for you

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.