https://community.splunk.com/t5/Splunk-Search/how-to-identify-unique-user-entry/m-p/58291#M14250 <P>Log 11:34:23 <A href="http://www.rohm.com">http://www.rohm.com</A> , customername="Hamilton",uuid="245209820udwdef34", customer id 5 </P> <P>Log 11:37:39 <A href="http://www.rohm.com">http://www.rohm.com</A> , customername="John",uuid="4878742345dsdef34", customer id 23</P> <P>Log 11:39:45 <A href="http://www.rohm.com">http://www.rohm.com</A> , customername="Pearson",uuid="4398723isdjdwef34", customer id 84</P> <P>Log 11:42:58 <A href="http://www.rohm.com">http://www.rohm.com</A> , customername="John",uuid="4878742345dsdef34", customer id 23</P> <P>Log 11:47:43 <A href="http://www.rohm.com">http://www.rohm.com</A> , customername="Hamilton",uuid="245209820udwdef34", customer id 5</P> <P>Here i need to identify (unique) user entry like Hamilton , John , Pearson <BR /> So the answer should be like this total unique user is 3 </P> Tue, 12 Mar 2013 10:31:39 GMT dilstn 2013-03-12T10:31:39Z https://community.splunk.com/t5/Splunk-Search/how-to-identify-unique-user-entry/m-p/58291#M14250 <P>Log 11:34:23 <A href="http://www.rohm.com">http://www.rohm.com</A> , customername="Hamilton",uuid="245209820udwdef34", customer id 5 </P> <P>Log 11:37:39 <A href="http://www.rohm.com">http://www.rohm.com</A> , customername="John",uuid="4878742345dsdef34", customer id 23</P> <P>Log 11:39:45 <A href="http://www.rohm.com">http://www.rohm.com</A> , customername="Pearson",uuid="4398723isdjdwef34", customer id 84</P> <P>Log 11:42:58 <A href="http://www.rohm.com">http://www.rohm.com</A> , customername="John",uuid="4878742345dsdef34", customer id 23</P> <P>Log 11:47:43 <A href="http://www.rohm.com">http://www.rohm.com</A> , customername="Hamilton",uuid="245209820udwdef34", customer id 5</P> <P>Here i need to identify (unique) user entry like Hamilton , John , Pearson <BR /> So the answer should be like this total unique user is 3 </P> Tue, 12 Mar 2013 10:31:39 GMT https://community.splunk.com/t5/Splunk-Search/how-to-identify-unique-user-entry/m-p/58291#M14250 dilstn 2013-03-12T10:31:39Z https://community.splunk.com/t5/Splunk-Search/how-to-identify-unique-user-entry/m-p/58292#M14251 <P>stats dc(customername)?</P> Tue, 12 Mar 2013 10:33:07 GMT https://community.splunk.com/t5/Splunk-Search/how-to-identify-unique-user-entry/m-p/58292#M14251 martin_mueller 2013-03-12T10:33:07Z