https://community.splunk.com/t5/Splunk-Search/Total-event-count-of-specific-field/m-p/53639#M13034 <P>My Query:</P> <PRE><CODE>index=blah sourcetype="blah-2" | dedup User_IP </CODE></PRE> <P>This works by extracting the unique IP's defined by the field User_IP, and the eventcount at the top of the search returns a total of say "395". What I want it to do is actually spit out the number within the search results so I can add this to a dashboard.</P> <P>I can't for the life of me find the correct command to do so.</P> <P>Thanks in advance!</P> Mon, 03 Jun 2013 17:03:12 GMT hagjos43 2013-06-03T17:03:12Z https://community.splunk.com/t5/Splunk-Search/Total-event-count-of-specific-field/m-p/53639#M13034 <P>My Query:</P> <PRE><CODE>index=blah sourcetype="blah-2" | dedup User_IP </CODE></PRE> <P>This works by extracting the unique IP's defined by the field User_IP, and the eventcount at the top of the search returns a total of say "395". What I want it to do is actually spit out the number within the search results so I can add this to a dashboard.</P> <P>I can't for the life of me find the correct command to do so.</P> <P>Thanks in advance!</P> Mon, 03 Jun 2013 17:03:12 GMT https://community.splunk.com/t5/Splunk-Search/Total-event-count-of-specific-field/m-p/53639#M13034 hagjos43 2013-06-03T17:03:12Z https://community.splunk.com/t5/Splunk-Search/Total-event-count-of-specific-field/m-p/53640#M13035 <PRE><CODE>... | stats count </CODE></PRE> <P>?</P> Mon, 03 Jun 2013 18:40:37 GMT https://community.splunk.com/t5/Splunk-Search/Total-event-count-of-specific-field/m-p/53640#M13035 Ayn 2013-06-03T18:40:37Z