<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to omit duplicate values of a column in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157648#M31933</link>
    <description>&lt;P&gt;Hi&lt;/P&gt;

&lt;P&gt;Try this search code I ‘m sure that it will be work well&lt;BR /&gt;&lt;BR /&gt;
      replace omitduplication.csv by a source name of your file&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;source="omitduplication.csv "| stats count by colA ,colB, colD | appendcols[search source="omitduplication.csv" | dedup colC] | table colA colB colC colD
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Mon, 15 Dec 2014 08:48:56 GMT</pubDate>
    <dc:creator>chimell</dc:creator>
    <dc:date>2014-12-15T08:48:56Z</dc:date>
    <item>
      <title>How to omit duplicate values of a column</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157643#M31928</link>
      <description>&lt;P&gt;Hi i have a report as below,&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;Col A -----Col B--------Col C-----Col D
-------------------------------------------------
ABCD-----US  ----------323------12
XYZZ------AM-----------323------11
SADF-----SD------------323-------88
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;i need to remove the duplicate values of col C, i need to show only once in the first row like below,&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;Col A -----Col B--------Col C-----Col D
-------------------------------------------------
ABCD-----US  ----------323------12
XYZZ------AM----------------------11
SADF-----SD-----------------------88
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Here the report is grouped by ColA and ColB...&lt;/P&gt;

&lt;P&gt;Can anyone help me on this....&lt;/P&gt;</description>
      <pubDate>Fri, 12 Dec 2014 14:43:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157643#M31928</guid>
      <dc:creator>harish_ka</dc:creator>
      <dc:date>2014-12-12T14:43:05Z</dc:date>
    </item>
    <item>
      <title>Re: How to omit duplicate values of a column</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157644#M31929</link>
      <description>&lt;P&gt;What should be the output if report is like this.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt; Col A -----Col B--------Col C-----Col D
-------------------------------------------------
ABCD-----US ----------323------12
XYZZ------AM-----------323------11
SADF-----SD------------323-------88
PQRS------PM-----------999------11
QWER-----GB------------323-------88
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 12 Dec 2014 15:45:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157644#M31929</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2014-12-12T15:45:08Z</dc:date>
    </item>
    <item>
      <title>Re: How to omit duplicate values of a column</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157645#M31930</link>
      <description>&lt;P&gt;The column C values remains the same...&lt;BR /&gt;
if i have 5 rows..all values of Col C will be 323&lt;/P&gt;</description>
      <pubDate>Fri, 12 Dec 2014 15:55:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157645#M31930</guid>
      <dc:creator>harish_ka</dc:creator>
      <dc:date>2014-12-12T15:55:08Z</dc:date>
    </item>
    <item>
      <title>Re: How to omit duplicate values of a column</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157646#M31931</link>
      <description>&lt;P&gt;Based on your current update, this should work.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;your base search giving "Col C" and "Col D" group By "Col A" and "Col B"  | streamstats count as sno by "Col C"| eventstats max(sno) as max count as total  | eval "Col C"=if(total&amp;gt;max,'Col C', if(sno=1,'Col C', null())) | fields - sno,max,total
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 12 Dec 2014 16:10:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157646#M31931</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2014-12-12T16:10:08Z</dc:date>
    </item>
    <item>
      <title>Re: How to omit duplicate values of a column</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157647#M31932</link>
      <description>&lt;P&gt;base search  | streamstats count as sno by Col_C | eval Col_C=if(sno=1,Col_C,"") | fields - sno&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 18:26:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157647#M31932</guid>
      <dc:creator>rsathish47</dc:creator>
      <dc:date>2020-09-28T18:26:40Z</dc:date>
    </item>
    <item>
      <title>Re: How to omit duplicate values of a column</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157648#M31933</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;

&lt;P&gt;Try this search code I ‘m sure that it will be work well&lt;BR /&gt;&lt;BR /&gt;
      replace omitduplication.csv by a source name of your file&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;source="omitduplication.csv "| stats count by colA ,colB, colD | appendcols[search source="omitduplication.csv" | dedup colC] | table colA colB colC colD
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 15 Dec 2014 08:48:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157648#M31933</guid>
      <dc:creator>chimell</dc:creator>
      <dc:date>2014-12-15T08:48:56Z</dc:date>
    </item>
    <item>
      <title>Re: How to omit duplicate values of a column</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157649#M31934</link>
      <description>&lt;P&gt;Thank you so much somesoni2 and rsatish47 &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;BR /&gt;
its working as i expected...&lt;/P&gt;</description>
      <pubDate>Mon, 15 Dec 2014 09:52:44 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-omit-duplicate-values-of-a-column/m-p/157649#M31934</guid>
      <dc:creator>harish_ka</dc:creator>
      <dc:date>2014-12-15T09:52:44Z</dc:date>
    </item>
  </channel>
</rss>

