There are a number of ways to calculate events per a specified period of time. All these techniques rely on rounding _time down to some period of time and then grouping the results by the rounded buckets of _time.
Calculating events per slice of time
Get Implementing Splunk 7 - Third Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
