https://community.splunk.com/t5/Splunk-Search/How-to-count-distinct-IPs-from-a-given-country/m-p/443133#M125750 <P>I am trying to parse a syslog input to count the number of distinct IPs for a given country. My search string is </P> <PRE><CODE> iplocation src_ip | stats sparkline count by Country | sort - count | head 10 </CODE></PRE> <P>I'd like to add a column after "count" that displays the number of unique source IP for a given country. Is this possible?</P> Sun, 11 Aug 2019 17:57:18 GMT mlines333 2019-08-11T17:57:18Z https://community.splunk.com/t5/Splunk-Search/How-to-count-distinct-IPs-from-a-given-country/m-p/443133#M125750 <P>I am trying to parse a syslog input to count the number of distinct IPs for a given country. My search string is </P> <PRE><CODE> iplocation src_ip | stats sparkline count by Country | sort - count | head 10 </CODE></PRE> <P>I'd like to add a column after "count" that displays the number of unique source IP for a given country. Is this possible?</P> Sun, 11 Aug 2019 17:57:18 GMT https://community.splunk.com/t5/Splunk-Search/How-to-count-distinct-IPs-from-a-given-country/m-p/443133#M125750 mlines333 2019-08-11T17:57:18Z https://community.splunk.com/t5/Splunk-Search/How-to-count-distinct-IPs-from-a-given-country/m-p/443134#M125751 <P>Hello,</P> <P>Maybe you can try this?</P> <P>iplocation src_ip | stats sparkline count, dc(src_ip) by Country | sort - count | head 10</P> <P>Kind regards,<BR /> Willem</P> Wed, 30 Sep 2020 01:41:08 GMT https://community.splunk.com/t5/Splunk-Search/How-to-count-distinct-IPs-from-a-given-country/m-p/443134#M125751 willemjongeneel 2020-09-30T01:41:08Z