https://community.splunk.com/t5/Security/User-Browser-extract-Issue/m-p/552672#M12242 <P>H Team&nbsp;</P><P>I tried the below command , but the output is incorrect where all the count are showing under other instead .</P><P>&nbsp;SPL -&nbsp;| stats count(eval(match(User_Agent, "Firefox"))) as "Firefox", count(eval(match(User_Agent, "Chrome"))) as "Chrome", count(eval(match(User_Agent, "Safari"))) as "Safari", count(eval(match(User_Agent, "MSIE"))) as "IE", count(eval(match(User_Agent, "Trident"))) as "Trident", count(eval(NOT match(User_Agent, "Chrome|Firefox|Safari|MSIE|Trident"))) as "Other" | transpose | sort by User_Agent</P><P>&nbsp;</P><DIV class="mceNonEditable lia-copypaste-placeholder"><BR /><DIV class="lia-progress-placeholder mceNonEditable"><DIV class="lia-media-progress"><DIV class="lia-progress-bar-stripes lia-progress-bar-animate lia-media-progress-bar"><DIV class="lia-progress-bar">&nbsp;<SPAN class="lia-progress-value"><SPAN class="lia-progress-value">Updating Media</SPAN></SPAN><P>&nbsp;</P></DIV></DIV></DIV></DIV></DIV> Mon, 24 May 2021 04:17:23 GMT jaibalaraman 2021-05-24T04:17:23Z https://community.splunk.com/t5/Security/User-Browser-extract-Issue/m-p/552672#M12242 <P>H Team&nbsp;</P><P>I tried the below command , but the output is incorrect where all the count are showing under other instead .</P><P>&nbsp;SPL -&nbsp;| stats count(eval(match(User_Agent, "Firefox"))) as "Firefox", count(eval(match(User_Agent, "Chrome"))) as "Chrome", count(eval(match(User_Agent, "Safari"))) as "Safari", count(eval(match(User_Agent, "MSIE"))) as "IE", count(eval(match(User_Agent, "Trident"))) as "Trident", count(eval(NOT match(User_Agent, "Chrome|Firefox|Safari|MSIE|Trident"))) as "Other" | transpose | sort by User_Agent</P><P>&nbsp;</P><DIV class="mceNonEditable lia-copypaste-placeholder"><BR /><DIV class="lia-progress-placeholder mceNonEditable"><DIV class="lia-media-progress"><DIV class="lia-progress-bar-stripes lia-progress-bar-animate lia-media-progress-bar"><DIV class="lia-progress-bar">&nbsp;<SPAN class="lia-progress-value"><SPAN class="lia-progress-value">Updating Media</SPAN></SPAN><P>&nbsp;</P></DIV></DIV></DIV></DIV></DIV> Mon, 24 May 2021 04:17:23 GMT https://community.splunk.com/t5/Security/User-Browser-extract-Issue/m-p/552672#M12242 jaibalaraman 2021-05-24T04:17:23Z https://community.splunk.com/t5/Security/User-Browser-extract-Issue/m-p/552674#M12243 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jaibalaraman_0-1621829861354.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/14274i93E3F110AC61BADA/image-size/medium?v=v2&amp;px=400" role="button" title="jaibalaraman_0-1621829861354.png" alt="jaibalaraman_0-1621829861354.png" /></span></P><P>&nbsp;</P> Mon, 24 May 2021 04:17:48 GMT https://community.splunk.com/t5/Security/User-Browser-extract-Issue/m-p/552674#M12243 jaibalaraman 2021-05-24T04:17:48Z