Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Count by values for two fields like a table

$
0
0
I have events coming with two distinct key say "Key1" and "Key2". Expected value for these keys are 1 to 3. I want a table where I can see the count of each key for every possible value like... **Value** | **count(Key1)** | **count( Key2)** 1 | 10 | 3 2 | 1 | 15 3 | 4 | 6 tried "| stats count(key1), count(key2) by value" but that doesn't work

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>