topic Count multi value field in Data Model in Knowledge Management

Count multi value field in Data Model

guimilare — Thu, 07 Jun 2018 15:14:02 GMT

Hello Splunkers.

I have a data model that contains a multi value field, called acao.
Looking at the data model, I have the following:

When I run the following query: | tstats count(DM.acao) from datamodel="My_DataModel", the result is 2.
However, I want it to count all occurrences, resulting in 8 (1 P and 7 X's).

How can I do this?

Thanks.
Best Regards,
GMA

Re: Count multi value field in Data Model

Ayn — Thu, 07 Jun 2018 15:36:59 GMT

| tstats dc(DM.acao)?

Re: Count multi value field in Data Model

kamlesh_vaghela — Thu, 07 Jun 2018 16:15:33 GMT

HI @guimilare,

Can you please try this?

| tstats count from datamodel="My_DataModel" by DM.acao | stats sum(count) as count

Thanks