Answer "A"
his example creates a chart of how many new users go online each hour of the day.
... | sort _time | streamstats dc(userid) as dcusers | delta dcusers as deltadcusers | timechart sum(deltadcusers)
The dc (or distinct_count) function returns a count of the unique values of userid and renames the resulting field dcusers.
https://docs.splunk.com/Documentation/Splunk/9.0.0/SearchReference/Aggregatefunctions
"Returns the count of distinct values of the field X. This function processes field values as strings. To use this function, you can specify distinct_count(X), or the abbreviation dc(X). "
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
amrit12345
Highly Voted 2 years, 11 months agoyawdeals
Most Recent 7 months, 3 weeks agoG4ct756
11 months, 2 weeks agoJanna05
2 years, 3 months agoSpTester
2 years, 5 months agoNanila
2 years, 6 months agomsn_aden
1 year, 8 months ago