topic Re: combining 2 stats output into 1 in Splunk Search

combining 2 stats output into 1

p_basanth — Wed, 20 Mar 2013 08:53:34 GMT

I want to combine the below 2 ouputs into single line

| stats count by Domain

| stats values(Domain) by Short_Host

The expected output is

Short_Host Values(Domain) Count by Domain

royimad — Wed, 20 Mar 2013 09:05:33 GMT

You can combine several line with "," and count for a specific values
| stats count(eval(Domain="y")) , count(eval(Domain="x")) by Short_Host

p_basanth — Wed, 20 Mar 2013 09:25:57 GMT

Apologies. My expectation is as per below:
Short_Host Values(Domain) Count by Domain
host 1 abc 11
xyz 15
def 20
host 2 abc 06
xyz 27
def 34

p_basanth — Mon, 28 Sep 2020 13:33:14 GMT

something similar to values,count group by short_host. For each short_host multiple domains and corresponding count in a table format.

p_basanth — Wed, 20 Mar 2013 09:30:51 GMT

| stats values(Domain), count by Short_Host gives me overall count. But i need individual count by Domain.