Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Sort groups by group total

$
0
0
Hi, I want to display the count of occurrences of logline* for each user per date but sort the groups by total count My data is something like user1 10/10/2019 logline1 user1 10/10/2019 logline2 user1 10/10/2019 logline3 user1 10/11/2019 logline4 user1 10/11/2019 logline5 user2 10/10/2019 logline6 user2 10/11/2019 logline1 user2 10/11/2019 logline2 user2 10/11/2019 logline3 user2 10/11/2019 logline4 user2 10/12/2019 logline5 user2 10/13/2019 logline6 user2 10/13/2019 logline7 user3 10/10/2019 logline1 user3 10/10/2019 logline2 user3 10/11/2019 logline3 user3 10/11/2019 logline4 user3 10/12/2019 logline5 user3 10/12/2019 logline6 user3 10/12/2019 logline7 I want to display the results like user2 10/10/2019 1 10/11/2019 4 10/12/2019 1 10/13/2019 2 user3 10/10/2019 2 10/11/2019 2 10/12/2019 3 user1 10/10/2019 3 10/11/2019 2 Here user2 has total 10 entries, user3 has 7 and user1 has 5. so the output should be sorted that way.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>