Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Add final total count of results

$
0
0
I can't seem to figure out a way to add a bottom row for a total count of results (records) to the end of the results without adding another column for a count and then totaling that column. There must be an easier way. I can't use "|stats count" which is the number I'm looking for because that suppresses the details of the results. Using "|stats count by ....(all my fields needed in output)" works but it adds an unwanted column for the count. If I try to use |fields - count -that breaks the total count. I know there must be a way for this - please help!

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>