https://community.splunk.com/t5/Getting-Data-In/How-to-get-comma-separated-list-of-values/m-p/416807#M73597 <PRE><CODE>index=uplynk slice_played isLive=1 channelID=8f88881faa334ab59484e999c6c5c318 | stats dc(playerUserAgent) as "Count of Unique User Agents", values(playerUserAgent) as useragents by sessionID | eval useragents = mvjoin(useragents, ",") </CODE></PRE> Tue, 16 Apr 2019 00:14:55 GMT sduff_splunk 2019-04-16T00:14:55Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-comma-separated-list-of-values/m-p/416806#M73596 <P>Hi,</P> <P>Here's my query:</P> <PRE><CODE>index=uplynk slice_played isLive=1 channelID=8f88881faa334ab59484e999c6c5c318 | stats dc(playerUserAgent) as "Count of Unique User Agents" by sessionID </CODE></PRE> <P>This gives me a distinct count of playerUserAgent by sessionID. However, in the resulting statistics table, I not only want the sessionID and "Count of Unique User Agents", but also the comma separated values of playerUserAgent. I've tried using mv commands but with no success. Please help!</P> Mon, 15 Apr 2019 23:20:55 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-comma-separated-list-of-values/m-p/416806#M73596 moizmmz 2019-04-15T23:20:55Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-comma-separated-list-of-values/m-p/416807#M73597 <PRE><CODE>index=uplynk slice_played isLive=1 channelID=8f88881faa334ab59484e999c6c5c318 | stats dc(playerUserAgent) as "Count of Unique User Agents", values(playerUserAgent) as useragents by sessionID | eval useragents = mvjoin(useragents, ",") </CODE></PRE> Tue, 16 Apr 2019 00:14:55 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-comma-separated-list-of-values/m-p/416807#M73597 sduff_splunk 2019-04-16T00:14:55Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-comma-separated-list-of-values/m-p/416808#M73598 <P>@moizmmz </P> <P>Try this.</P> <PRE><CODE>index=uplynk slice_played isLive=1 channelID=8f88881faa334ab59484e999c6c5c318 | stats delim="," dc(playerUserAgent) as "Count of Unique User Agents", values(playerUserAgent) as useragents by sessionID | nomv useragents </CODE></PRE> <P>Here, I have used <CODE>delim</CODE> in <CODE>stats</CODE> and <CODE>nomv</CODE>. </P> <P>Ref:</P> <P><A href="https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/stats">https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/stats</A></P> <P><A href="https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/nomv">https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/nomv</A></P> Tue, 16 Apr 2019 05:45:51 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-comma-separated-list-of-values/m-p/416808#M73598 kamlesh_vaghela 2019-04-16T05:45:51Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-comma-separated-list-of-values/m-p/416809#M73599 <P>This works too <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span> thank you!!</P> Tue, 16 Apr 2019 16:31:59 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-comma-separated-list-of-values/m-p/416809#M73599 moizmmz 2019-04-16T16:31:59Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-comma-separated-list-of-values/m-p/416810#M73600 <P>This works! Thank you <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Tue, 16 Apr 2019 16:32:11 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-comma-separated-list-of-values/m-p/416810#M73600 moizmmz 2019-04-16T16:32:11Z https://community.splunk.com/t5/Getting-Data-In/How-to-get-comma-separated-list-of-values/m-p/416811#M73601 <P>Sorry I could only accept one answer. But I'll send you some points. Thanks for your help!</P> Tue, 16 Apr 2019 16:32:53 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-get-comma-separated-list-of-values/m-p/416811#M73601 moizmmz 2019-04-16T16:32:53Z