# Number of page hit during 30 minutes for a single IP

**URL:** <https://discuss.elastic.co/t/number-of-page-hit-during-30-minutes-for-a-single-ip/100936>\
**Category:** Kibana\
**Created:** [September 18, 2017, 9:35pm UTC](https://discuss.elastic.co/t/number-of-page-hit-during-30-minutes-for-a-single-ip/100936 "2017-09-18T21:35:29Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![vvandamme](https://avatars.discourse-cdn.com/v4/letter/v/c37758/32.png) [@vvandamme](https://discuss.elastic.co/u/vvandamme)\
**Post date:** [September 18, 2017, 9:35pm UTC](https://discuss.elastic.co/t/number-of-page-hit-during-30-minutes-for-a-single-ip/100936/1 "2017-09-18T21:35:29Z")

</div>

Hi, sorry for the beginner question ( and my english), i try to implement this function :

i index apache log with the request field, ip and timestamp(etc ...)

i try to count the number of hit to a particular page, for exemple : /portal/default/Humanressource.  
Very easy.

But, i only want 1 hint for a specific IP address during 30 minutes.

We call that a "session".

For exemple :

30/Jun/2017:04:01:46 +0200 192.168.3.84 /portal/default/Humanressource  
30/Jun/2017:04:11:25 +0200 192.168.3.84 /portal/default/Humanressource  
30/Jun/2017:04:22:11 +0200 192.168.3.84 /portal/default/Humanressource

i must have only 1 count

And , if the same user (same IP) access the same page 30 minutes later, i must have 1 more hit.

30/Jun/2017:04:31:50 +0200 192.168.3.84 /portal/default/Humanressource

Can we do that with kibana ? count the number of session for a specific time range of 30 minutes.

Any clues to get me on the road ?

Thanks for your help

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 18, 2017, 10:01pm UTC](https://discuss.elastic.co/t/number-of-page-hit-during-30-minutes-for-a-single-ip/100936/2 "2017-09-18T22:01:23Z")

</div>

Yep, just use a cardinality (unique) aggregation on the IP field 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 16, 2017, 10:06pm UTC](https://discuss.elastic.co/t/number-of-page-hit-during-30-minutes-for-a-single-ip/100936/3 "2017-10-16T22:06:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.