https://community.splunk.com/t5/Getting-Data-In/How-to-find-duplicate-logs-that-contain-uuids/m-p/422258#M74192 <P>Hi, I want to know if there are more than one logs with the same message and the same uuid.</P> <P>Eg:</P> <OL> <LI><CODE>This an error for user with id: 1</CODE></LI> <LI><CODE>This an error for user with id: 2</CODE></LI> <LI><CODE>This an error for user with id: 1</CODE></LI> <LI><CODE>This an error for user with id: 3</CODE></LI> </OL> <P>I want to know if there are cases like <CODE>1</CODE> &amp; <CODE>3</CODE> where the log is exactly the same but the user id is automatically generated.</P> Tue, 23 Apr 2019 09:43:40 GMT nicolasmanic 2019-04-23T09:43:40Z https://community.splunk.com/t5/Getting-Data-In/How-to-find-duplicate-logs-that-contain-uuids/m-p/422258#M74192 <P>Hi, I want to know if there are more than one logs with the same message and the same uuid.</P> <P>Eg:</P> <OL> <LI><CODE>This an error for user with id: 1</CODE></LI> <LI><CODE>This an error for user with id: 2</CODE></LI> <LI><CODE>This an error for user with id: 1</CODE></LI> <LI><CODE>This an error for user with id: 3</CODE></LI> </OL> <P>I want to know if there are cases like <CODE>1</CODE> &amp; <CODE>3</CODE> where the log is exactly the same but the user id is automatically generated.</P> Tue, 23 Apr 2019 09:43:40 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-find-duplicate-logs-that-contain-uuids/m-p/422258#M74192 nicolasmanic 2019-04-23T09:43:40Z https://community.splunk.com/t5/Getting-Data-In/How-to-find-duplicate-logs-that-contain-uuids/m-p/422259#M74193 <P>Assuming you have the message and uuid extracted into fields already:</P> <PRE><CODE>... | eventstats count by message,uuid | where count&gt;1 </CODE></PRE> Tue, 23 Apr 2019 14:41:40 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-find-duplicate-logs-that-contain-uuids/m-p/422259#M74193 FrankVl 2019-04-23T14:41:40Z