Messages Analyzer

Chat All * chat chat index=messenger | dedup chat | table chat | sort chat 0 Year * date_year date_year index=messenger chat="$chatname$" | dedup date_year | table date_year | sort -date_year 0 All

index=messenger chat="$chatname$" date_year=$year$ | stats count 0 1 value none all 0 ["0x53a051","0x53a051"] [0] progressbar 1 1 0 1 medium standard absolute messages after 1 1 search?q=index%3Dmessenger%20date_year%3D$year$&earliest=0&latest= index=messenger chat="$chatname$" date_year=$year$ | eval message=substr(message,2,len(message)-2) | rex mode=sed "s/(\.|,|;|=|\"|'|\(|\)|\[|\]| -|!|^-)/ /g" | eval word=message | makemv delim=" " word | mvexpand word | eval word=lower(word) | table word | stats count 0 1 value none none 0 ["0x53a051","0x53a051"] [0] progressbar 1 1 0 1 medium standard absolute words after 1 1 index=messenger chat="$chatname$" date_year=$year$ | eval name=substr(name,2,len(name)-2), message=substr(message,2,len(message)-2), word_count=mvcount(split(message," ")) | timechart count span=w 0 1 ellipsisNone 0 Time collapsed collapsed visible none linear none linear none 0 inherit column 50 10 area gaps none 0.01 default shiny all 0 0 ellipsisMiddle standard none 2 progressbar 0 1 medium index=messenger chat="$chatname$" date_year=$year$ | eval name=substr(name,2,len(name)-2), message=substr(message,2,len(message)-2), word_count=mvcount(split(message," ")) | timechart count span=w by name useother=f limit=18 0 1 ellipsisNone 0 Time collapsed visible visible none linear none linear none 0 inherit area 50 10 area gaps none 0.01 default shiny all 0 0 ellipsisMiddle standard right 2 progressbar 0 1 medium Name All * name name index=messenger chat="$chatname$" | dedup name | eval name=substr(name,2,len(name)-2) | table name | sort name 0 index=messenger chat="$chatname$" date_year=$year$ | eval date_hour=case(date_hour=1, "01", date_hour=2, "02", date_hour=3, "03", date_hour=4, "04", date_hour=5, "05", date_hour=6, "06", date_hour=7, "07", date_hour=8, "08", date_hour=9, "09", true(), date_hour), name=substr(name,2,len(name)-2) | search name="$hourname$" | stats count by date_hour 0 1 ellipsisNone 0 Hour visible collapsed visible none linear none linear none 0 inherit column 50 10 area gaps none 0.01 default shiny all 0 0 ellipsisMiddle standard none 2 progressbar 0 1 medium index=messenger chat="$chatname$" date_year=$year$ | eval name=substr(name,2,len(name)-2), message=substr(message,2,len(message)-2), word_count=mvcount(split(message," ")) | stats count(message), avg(word_count) as average, count(eval(message=="<media>")) as media_count by name | rename name as Name, count(message) as "Messages Sent", average as "Average Message Length", media_count as "Images Sent", word_count as "Word Count" 0 1 visible visible visible pie 0 right progressbar 0 $click.value$ index=messenger chat="$chatname$" date_year=$year$ | eval name=substr(name,2,len(name)-2), message=substr(message,2,len(message)-2) | search name="$name$" | rex mode=sed "s/(\.|,|;|=|\"|'|\(|\)|\[|\]| -|!|^-)/ /g" | eval word=message | makemv delim=" " word | mvexpand word | eval word=lower(word) | table word | stats count by word | sort -count | rename word as Word, count as Count 0 1 6nonerowfalseprogressbartruefalsetrue search?q=index%3Dmessenger%20date_year%3D$year$%0A%7C%20eval%20name%3Dsubstr(name%2C2%2Clen(name)-2)%2C%20message%3Dsubstr(message%2C2%2Clen(message)-2)%0A%7C%20search%20name%3D%22$name$%22&earliest=0&latest= index=messenger chat="$chatname$" date_year=$year$ | eval name=substr(name,2,len(name)-2), message=substr(message,2,len(message)-2), word_count=mvcount(split(message," ")) | chart count(eval(message=="<media>")) as media_count by name | rename name as Name, media_count as "Images Sent" 0 1 ellipsisNone 0 visible visible visible none linear none linear none 0 inherit pie 50 10 area gaps none 0 default shiny none 0 0 ellipsisMiddle standard right 2 progressbar 0 1 medium Phrase * index=messenger chat="$chatname$" date_year=$year$ | eval name=substr(name,2,len(name)-2), message=substr(message,2,len(message)-2) | search "$phrase$" | stats count by name | sort -count | rename name as Name, count as Count 0 1 ellipsisNone -45 collapsed collapsed column none $click.value$ index=messenger chat="$chatname$" date_year=$year$ | eval name=substr(name,2,len(name)-2), message=substr(message,2,len(message)-2) | search "$phrase$" name="$wordname$" | timechart count span=mon 0 1 ellipsisNone 0 Time collapsed collapsed visible none linear none linear none 0 inherit line 50 10 area gaps none 0.01 default shiny all 0 0 ellipsisMiddle standard none 2 325 progressbar 0 1 medium search?q=index%3Dmessenger%20date_year%3D$year$%20%7C%20eval%20name%3Dsubstr(name%2C2%2Clen(name)-2)%2C%20message%3Dsubstr(message%2C2%2Clen(message)-2)%20%7C%20search%20%22$phrase$%22%20%20name%3D%22$wordname$%22&earliest=0&latest=