https://community.splunk.com/t5/Splunk-Search/how-to-do-a-stats-count-and-generate-all-of-the-fields/m-p/291949#M160475 <P>Switch to <CODE>eventstats</CODE>:</P> <PRE><CODE>sourcetype="sourcenamet" search string | eventstats count by field1 | where count&lt;2 | table field1 field 2 field3 field4 </CODE></PRE> Thu, 29 Jun 2017 20:46:19 GMT woodcock 2017-06-29T20:46:19Z https://community.splunk.com/t5/Splunk-Search/how-to-do-a-stats-count-and-generate-all-of-the-fields/m-p/291948#M160474 <P>I'm trying to do a stats command to find a count of any value less than 2 counts and display all the other fields. I only want a stats count on one field, but I want to display all the field that is generated with that stats count result.</P> <P>This is my search query<BR /> sourcetype="sourcenamet" search string | stats count by field1 | where count&lt;2 | | table field1 field 2 field3 field4</P> Thu, 29 Jun 2017 20:24:58 GMT https://community.splunk.com/t5/Splunk-Search/how-to-do-a-stats-count-and-generate-all-of-the-fields/m-p/291948#M160474 mrtolu6 2017-06-29T20:24:58Z https://community.splunk.com/t5/Splunk-Search/how-to-do-a-stats-count-and-generate-all-of-the-fields/m-p/291949#M160475 <P>Switch to <CODE>eventstats</CODE>:</P> <PRE><CODE>sourcetype="sourcenamet" search string | eventstats count by field1 | where count&lt;2 | table field1 field 2 field3 field4 </CODE></PRE> Thu, 29 Jun 2017 20:46:19 GMT https://community.splunk.com/t5/Splunk-Search/how-to-do-a-stats-count-and-generate-all-of-the-fields/m-p/291949#M160475 woodcock 2017-06-29T20:46:19Z