# Long term data analysis options

**URL:** https://discourse.pi-hole.net/t/long-term-data-analysis-options/23107
**Category:** Closed or Out Of Scope
**Created:** [September 3, 2019, 4:21am UTC](https://discourse.pi-hole.net/t/long-term-data-analysis-options/23107 "2019-09-03T04:21:52Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Zq2LpWRysF](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/z/3da27b/32.png) [@Zq2LpWRysF](https://discourse.pi-hole.net/u/Zq2LpWRysF)
#### Post date: [September 3, 2019, 4:21am UTC](https://discourse.pi-hole.net/t/long-term-data-analysis-options/23107/1 "2019-09-03T04:21:52Z")

</div>

I do a weekly scan through the logs using 'long term data / query log' and look for suspicious domains that slipped through. I'll generally try and filter using things like 'geo', 'location', 'telemetry', 'ads', etc. but that can generate a very long list with a lot of repeated domains, e.g. thousands to watson.telemetry.microsoft.com. What would make this so much easier would be a way to show only unique domains from the filter, perhaps with a counter showing the actual hit count?

Another useful feature would be a way to jump to a specific time window, e.g. +/- 10 seconds, from a given entry in the filtered list. That could help isolate the surrounding context of the query and give some insight into which site or application might have instigated it.

Hopefully it's ok to put these in the same suggestion. Thank you for all your hard work on this amazing project.

---

<div class="post-metadata">

### Author: ![yubiuser](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/yubiuser/32/12100_2.png) [@yubiuser](https://discourse.pi-hole.net/u/yubiuser)
#### Post date: [June 13, 2020, 10:56am UTC](https://discourse.pi-hole.net/t/long-term-data-analysis-options/23107/2 "2020-06-13T10:56:17Z")

</div>

The first request is covered by

> [@Unique domain names per interval in the long-term database](https://discourse.pi-hole.net/t/unique-domain-names-per-interval/27136/2):
>
> Could you please add "in the long-term database" to the titel? This would make it easier for others to see the difference between your FR and this one: [https://discourse.pi-hole.net/t/filter-out-duplicate-domains-from-query-log/13627](https://discourse.pi-hole.net/t/filter-out-duplicate-domains-from-query-log/13627)

and

> [@Filter Out Duplicate Domains From Query Log](https://discourse.pi-hole.net/t/filter-out-duplicate-domains-from-query-log/13627):
>
> Can you please add an option to filter out duplicate domains from the query log section. Because it can often be difficult to analyze the logs with so many duplicate entries. Thanks

I would like to ask you to remove the first part of your FR and keep just the wish for a way to jump to a specific time window. Please rename the title accordingly.

---

<div class="post-metadata">

### Author: ![Zq2LpWRysF](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/z/3da27b/32.png) [@Zq2LpWRysF](https://discourse.pi-hole.net/u/Zq2LpWRysF)
#### Post date: [August 10, 2020, 12:03am UTC](https://discourse.pi-hole.net/t/long-term-data-analysis-options/23107/3 "2020-08-10T00:03:07Z")

</div>

Ok, can do. Sorry for the slow reply. I log in seldomly and post even less frequently! 🙂 I couldn't see an option to edit my post title so I created a new one and I'll just delete this. I think it's pending approval though.

---

<div class="post-metadata">

### Author: ![yubiuser](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/yubiuser/32/12100_2.png) [@yubiuser](https://discourse.pi-hole.net/u/yubiuser)
#### Post date: [August 10, 2020, 5:35am UTC](https://discourse.pi-hole.net/t/long-term-data-analysis-options/23107/4 "2020-08-10T05:35:46Z")

</div>

Thanks.

---

<div class="post-metadata">

### Author: ![yubiuser](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/yubiuser/32/12100_2.png) [@yubiuser](https://discourse.pi-hole.net/u/yubiuser)
#### Post date: [August 10, 2020, 5:35am UTC](https://discourse.pi-hole.net/t/long-term-data-analysis-options/23107/5 "2020-08-10T05:35:49Z")

</div>


