topic Re: use stat results as string instead of numbers in Splunk Search https://community.splunk.com/t5/Splunk-Search/use-stat-results-as-string-instead-of-numbers/m-p/480411#M134640 <P>This is perfect I am going to look into the values thing now. THANKS!!</P> Tue, 03 Mar 2020 14:31:04 GMT rtalcik 2020-03-03T14:31:04Z use stat results as string instead of numbers https://community.splunk.com/t5/Splunk-Search/use-stat-results-as-string-instead-of-numbers/m-p/480409#M134638 <P>Hi everyone, so I am wondering if it is possible to display my results as a string for computername instead of displaying it as a number. I don't believe using count or stats is the right process here, but I was wondering if someone can help me edit my command to do what I want So below is the stats command and I want to see the results by user along with WHAT computername and WHAT Host as a string</P> <P>| stats count as total_count count(eval(EventCode="4625")) as denied_count count(eval(EventCode="4624" OR EventCode="4768" OR EventCode="4776")) as permitted_count count(eval(host)) as host count(eval(ComputerName)) as computer by user </P> Wed, 30 Sep 2020 04:22:26 GMT https://community.splunk.com/t5/Splunk-Search/use-stat-results-as-string-instead-of-numbers/m-p/480409#M134638 rtalcik 2020-09-30T04:22:26Z Re: use stat results as string instead of numbers https://community.splunk.com/t5/Splunk-Search/use-stat-results-as-string-instead-of-numbers/m-p/480410#M134639 <P>Try this</P> <PRE><CODE>... | stats count as total_count count(eval(EventCode="4625")) as denied_count count(eval(EventCode="4624" OR EventCode="4768" OR EventCode="4776")) as permitted_count count(host) as host count(ComputerName) as computer values(host) as hosts values(ComputerName) as computers by user </CODE></PRE> Fri, 28 Feb 2020 15:23:21 GMT https://community.splunk.com/t5/Splunk-Search/use-stat-results-as-string-instead-of-numbers/m-p/480410#M134639 richgalloway 2020-02-28T15:23:21Z Re: use stat results as string instead of numbers https://community.splunk.com/t5/Splunk-Search/use-stat-results-as-string-instead-of-numbers/m-p/480411#M134640 <P>This is perfect I am going to look into the values thing now. THANKS!!</P> Tue, 03 Mar 2020 14:31:04 GMT https://community.splunk.com/t5/Splunk-Search/use-stat-results-as-string-instead-of-numbers/m-p/480411#M134640 rtalcik 2020-03-03T14:31:04Z