https://community.splunk.com/t5/Splunk-Search/How-to-get-unique-Maximum-value-of-corresponding-field/m-p/558864#M158781 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/227098">@ISP8055</a>&nbsp;</P><P>Can you please try this?</P><LI-CODE lang="markup">YOUR_SEARCH | stats max(load) as load by Server</LI-CODE><P>&nbsp;</P><P><STRONG>My Sample Search :</STRONG></P><LI-CODE lang="markup">| makeresults | eval _raw="Server load A 65 A 50 B 35 C 55 B 45 C 70" | multikv forceheader=1 | table Server load | stats max(load) as load by Server</LI-CODE><P><BR />&nbsp;Thanks<BR />KV<BR />▄︻̷̿┻̿═━一<BR /><BR />If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.</P> Fri, 09 Jul 2021 15:44:56 GMT kamlesh_vaghela 2021-07-09T15:44:56Z https://community.splunk.com/t5/Splunk-Search/How-to-get-unique-Maximum-value-of-corresponding-field/m-p/558862#M158780 <P>Hi there,&nbsp;<BR /><BR />I have data like this:</P><TABLE border="1" width="100%"><TBODY><TR><TD width="50%">Server&nbsp;</TD><TD width="50%">load</TD></TR><TR><TD width="50%">A</TD><TD width="50%">65</TD></TR><TR><TD width="50%">A</TD><TD width="50%">50</TD></TR><TR><TD width="50%">B</TD><TD width="50%">35</TD></TR><TR><TD width="50%">C</TD><TD width="50%">55</TD></TR><TR><TD>B</TD><TD>45</TD></TR><TR><TD>C</TD><TD>70</TD></TR></TBODY></TABLE><P>&nbsp;</P><P>I want to get a maximum peak loads of each server type and display in a table format.<BR />So,</P><TABLE border="1" width="100%"><TBODY><TR><TD width="50%">Server</TD><TD width="50%">Peak load</TD></TR><TR><TD width="50%">A</TD><TD width="50%">65</TD></TR><TR><TD width="50%">B</TD><TD width="50%"><P>45</P></TD></TR><TR><TD>C</TD><TD><P>70</P></TD></TR></TBODY></TABLE><P><BR />I need help in how can I do that?</P> Fri, 09 Jul 2021 15:40:18 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-unique-Maximum-value-of-corresponding-field/m-p/558862#M158780 ISP8055 2021-07-09T15:40:18Z https://community.splunk.com/t5/Splunk-Search/How-to-get-unique-Maximum-value-of-corresponding-field/m-p/558864#M158781 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/227098">@ISP8055</a>&nbsp;</P><P>Can you please try this?</P><LI-CODE lang="markup">YOUR_SEARCH | stats max(load) as load by Server</LI-CODE><P>&nbsp;</P><P><STRONG>My Sample Search :</STRONG></P><LI-CODE lang="markup">| makeresults | eval _raw="Server load A 65 A 50 B 35 C 55 B 45 C 70" | multikv forceheader=1 | table Server load | stats max(load) as load by Server</LI-CODE><P><BR />&nbsp;Thanks<BR />KV<BR />▄︻̷̿┻̿═━一<BR /><BR />If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.</P> Fri, 09 Jul 2021 15:44:56 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-unique-Maximum-value-of-corresponding-field/m-p/558864#M158781 kamlesh_vaghela 2021-07-09T15:44:56Z