https://community.splunk.com/t5/Splunk-Search/TOP-10-values/m-p/477699#M134039 <P>Check out the <CODE>top</CODE> command. Also, the <CODE>sort</CODE> command has an option to limit the number of results.</P> Sat, 18 Apr 2020 12:21:18 GMT richgalloway 2020-04-18T12:21:18Z https://community.splunk.com/t5/Splunk-Search/TOP-10-values/m-p/477698#M134038 <P>I have a sample data from email logs where we have from and message size.<BR /> how can I extract "Top ten sending addresses by message size"<BR /> attaching sample data snapshot.</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/8710iF44E45A0D54E9813/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Sat, 18 Apr 2020 11:24:02 GMT https://community.splunk.com/t5/Splunk-Search/TOP-10-values/m-p/477698#M134038 riqbal47010 2020-04-18T11:24:02Z https://community.splunk.com/t5/Splunk-Search/TOP-10-values/m-p/477699#M134039 <P>Check out the <CODE>top</CODE> command. Also, the <CODE>sort</CODE> command has an option to limit the number of results.</P> Sat, 18 Apr 2020 12:21:18 GMT https://community.splunk.com/t5/Splunk-Search/TOP-10-values/m-p/477699#M134039 richgalloway 2020-04-18T12:21:18Z https://community.splunk.com/t5/Splunk-Search/TOP-10-values/m-p/477700#M134040 <P>In this case:</P> <PRE><CODE>your search | table from size | sort 10 - size </CODE></PRE> Sat, 18 Apr 2020 21:45:56 GMT https://community.splunk.com/t5/Splunk-Search/TOP-10-values/m-p/477700#M134040 to4kawa 2020-04-18T21:45:56Z