Skip to content

Instantly share code, notes, and snippets.

@dannycroft

dannycroft/ip-frequency.sql

Created June 21, 2016 11:07
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save dannycroft/69a75b7f39c68bb0de223880482ebc19 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save dannycroft/69a75b7f39c68bb0de223880482ebc19 to your computer and use it in GitHub Desktop.
Download ZIP
Sumologic IP Frequency
Raw
ip-frequency.sql
_sourceCategory=Apache/Access
| parse regex "(?<client_ip>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})"
| timeslice 1m
| count as hits by _timeslice, client_ip
| transpose row _timeslice column client_ip
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment