https://community.splunk.com/t5/Getting-Data-In/IIS-Logs-Count/m-p/410930#M72767 <P>From an IIS logs, if a user goes to the webpage once but 50 different thing are loaded on the webpage(example images) and Splunk counts each individual thing loaded on the page as a count. How can I find out how many times an IP got to a particular destination IP?</P> Fri, 25 May 2018 13:45:55 GMT tundeawe 2018-05-25T13:45:55Z https://community.splunk.com/t5/Getting-Data-In/IIS-Logs-Count/m-p/410930#M72767 <P>From an IIS logs, if a user goes to the webpage once but 50 different thing are loaded on the webpage(example images) and Splunk counts each individual thing loaded on the page as a count. How can I find out how many times an IP got to a particular destination IP?</P> Fri, 25 May 2018 13:45:55 GMT https://community.splunk.com/t5/Getting-Data-In/IIS-Logs-Count/m-p/410930#M72767 tundeawe 2018-05-25T13:45:55Z https://community.splunk.com/t5/Getting-Data-In/IIS-Logs-Count/m-p/410931#M72768 <P>Try something along the lines of this, to do a distinct count on source IPs by destination IPs (field names might need adjustment):</P> <PRE><CODE>...&lt;your base search&gt;... | stats dc(src_ip) by dest_ip </CODE></PRE> Fri, 25 May 2018 13:52:39 GMT https://community.splunk.com/t5/Getting-Data-In/IIS-Logs-Count/m-p/410931#M72768 FrankVl 2018-05-25T13:52:39Z