Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to modify my search to add the count of a particular field next to its field?

$
0
0
I have a search as follows My search | bin span=1h _time | stats values(field_1) as Field_1 by _time Field_2 Which displays the result as follows _time Field_2 Field_1 123 jkl gsad Now I want my search to modify the result to add a field which displays the total event count of Field_1(Field_1_count) next to it like below. How can i do that? _time Field_2 Field_1 Field_1_count 123 jkl gsad 23

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>