Searching for the top ten accessed web pages

If we modify the report search and replace the stats command with the top command, by default it will display the top ten web pages:

index=main sourcetype=access_combined | top uri_path 

Here, we modified the report search and replaced the stats command with the top command. By default, this will display the top ten web pages. You can then select the Visualization tab and choose Column to see the results displayed as a column chart. Then, by clicking on Format, you can access a menu that allows you to extend the control over the chart by applying specific values such as customizing the x and y axes, placement or removal of the legend, and more, as shown in the following screenshot:

Get Splunk Operational Intelligence Cookbook - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.