Let's break down the search piece by piece:
Search fragment |
Description |
index=main sourcetype=log4j requestType="checkout" |
You should be familiar with this search from the earlier recipes in this chapter. It is used to return events from the website access log. The search contains a field value filter, requestType="checkout", so that the returned results only include those events that are checkout requests, effectively representing a completed transaction. |
| timechart sum(total) AS total span=1week |
Using the table command, we simplify the dataset into a tabulated view of the _time of the event and the value of the response field for the given event. |
| predict "total" as prediction algorithm="LLP" future_timespan="10" ... |