This is what you're looking for:
<search> | stats max(_time) as last_visited count by site | table site last_visited count | eval last_visited=strftime(last_visited,"%c") Use whatever strftime format you like – %c is a convenient one I use a lot
April 24, 2020 at 12:22PM
via reddit https://www.reddit.com/r/Splunk/comments/g7ala9/using_stats_count_by_show_the_latest_date_for/fofz54w?utm_source=ifttt