https://community.splunk.com/t5/Monitoring-Splunk/Monitor-the-count-of-columns-generated-by-solutionType-splunk/m-p/484888#M8367 <P>This will give you the number of columns, set your alert to trigger when it's not five:</P> <PRE><CODE>index=index1 solutionType=* | stats dc(solutionType) as current_col_count </CODE></PRE> Mon, 23 Sep 2019 07:14:23 GMT martin_mueller 2019-09-23T07:14:23Z https://community.splunk.com/t5/Monitoring-Splunk/Monitor-the-count-of-columns-generated-by-solutionType-splunk/m-p/484887#M8366 <P>I would like to track count of the all the below splunk search query columns. if any "solutionType" is appended or deleted I expect alert.</P> <P>index=index1 | search solutionType=* | timechart count by solutionType | result below</P> <P>column1 column2 column3 column4 column5</P> <P>if column6 is added in next splunk report. or col5 is removed I expect alert.</P> <P>if current_col_count != 5</P> <P>I would like to track if any "solutionType" is appended or deleted in next splunk report expect alert.</P> Wed, 30 Sep 2020 02:14:53 GMT https://community.splunk.com/t5/Monitoring-Splunk/Monitor-the-count-of-columns-generated-by-solutionType-splunk/m-p/484887#M8366 harkirat9712 2020-09-30T02:14:53Z https://community.splunk.com/t5/Monitoring-Splunk/Monitor-the-count-of-columns-generated-by-solutionType-splunk/m-p/484888#M8367 <P>This will give you the number of columns, set your alert to trigger when it's not five:</P> <PRE><CODE>index=index1 solutionType=* | stats dc(solutionType) as current_col_count </CODE></PRE> Mon, 23 Sep 2019 07:14:23 GMT https://community.splunk.com/t5/Monitoring-Splunk/Monitor-the-count-of-columns-generated-by-solutionType-splunk/m-p/484888#M8367 martin_mueller 2019-09-23T07:14:23Z