https://community.splunk.com/t5/Splunk-Search/How-can-I-get-common-values-from-data/m-p/443463#M125811 <P><CODE>| eventstats count by oper_field ,department| where count &gt; 1 | stats list(oper_field) as gn by department</CODE></P> Wed, 05 Sep 2018 08:59:16 GMT thambisetty 2018-09-05T08:59:16Z https://community.splunk.com/t5/Splunk-Search/How-can-I-get-common-values-from-data/m-p/443462#M125810 <P>Now ,I want to get common values from data.<BR /> I use this command:</P> <PRE><CODE>`index="new_1" |stats list(oper_field) as gn by department </CODE></PRE> <P>Now ,I want to get a column to show values which count &gt;=2</P> <P>For example :<BR /> there have two "Model List" . I want to show it in another column </P> <P>Please help me</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/5718i434067612018242A/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Wed, 05 Sep 2018 08:42:35 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-get-common-values-from-data/m-p/443462#M125810 WXY 2018-09-05T08:42:35Z https://community.splunk.com/t5/Splunk-Search/How-can-I-get-common-values-from-data/m-p/443463#M125811 <P><CODE>| eventstats count by oper_field ,department| where count &gt; 1 | stats list(oper_field) as gn by department</CODE></P> Wed, 05 Sep 2018 08:59:16 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-get-common-values-from-data/m-p/443463#M125811 thambisetty 2018-09-05T08:59:16Z https://community.splunk.com/t5/Splunk-Search/How-can-I-get-common-values-from-data/m-p/443464#M125812 <P>Thank you!<BR /> Now I have another question,can you help me?<BR /> I want get data which accounted for the largest proportion . such as ,there are two "Model List" ,and all of data are three, the "Model List" is the largest proportion，what should I do?</P> Thu, 06 Sep 2018 01:20:11 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-get-common-values-from-data/m-p/443464#M125812 WXY 2018-09-06T01:20:11Z https://community.splunk.com/t5/Splunk-Search/How-can-I-get-common-values-from-data/m-p/443465#M125813 <P>Can you give me an example?</P> Thu, 06 Sep 2018 03:17:40 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-get-common-values-from-data/m-p/443465#M125813 thambisetty 2018-09-06T03:17:40Z https://community.splunk.com/t5/Splunk-Search/How-can-I-get-common-values-from-data/m-p/443466#M125814 <P>what do you need me to offer you, my data or a sample of the results is shown ?</P> Thu, 06 Sep 2018 04:03:01 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-get-common-values-from-data/m-p/443466#M125814 WXY 2018-09-06T04:03:01Z https://community.splunk.com/t5/Splunk-Search/How-can-I-get-common-values-from-data/m-p/443467#M125815 <P>Sample input and output</P> Thu, 06 Sep 2018 04:30:57 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-get-common-values-from-data/m-p/443467#M125815 thambisetty 2018-09-06T04:30:57Z