<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Question on Selected fields in fields side bar in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Question-on-Selected-fields-in-fields-side-bar/m-p/341871#M170177</link>
    <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;In the selected fields to the left, I have a selected field by name source_address and it looks like below:&lt;/P&gt;

&lt;P&gt;Top 10 values     Count      %&lt;BR /&gt;
192.168.0.155    14103     15.78%&lt;BR /&gt;
192.168.0.1         138324   15.47%&lt;/P&gt;

&lt;P&gt;I would like to know what does Count and % indicate? Whether Count is count of IP address occurred for a given time/date range?&lt;/P&gt;

&lt;P&gt;Please guide me.&lt;/P&gt;

&lt;P&gt;Regards,&lt;BR /&gt;
Sushma.&lt;/P&gt;</description>
    <pubDate>Thu, 19 Apr 2018 07:59:47 GMT</pubDate>
    <dc:creator>muralisushma7</dc:creator>
    <dc:date>2018-04-19T07:59:47Z</dc:date>
    <item>
      <title>Question on Selected fields in fields side bar</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Question-on-Selected-fields-in-fields-side-bar/m-p/341871#M170177</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;In the selected fields to the left, I have a selected field by name source_address and it looks like below:&lt;/P&gt;

&lt;P&gt;Top 10 values     Count      %&lt;BR /&gt;
192.168.0.155    14103     15.78%&lt;BR /&gt;
192.168.0.1         138324   15.47%&lt;/P&gt;

&lt;P&gt;I would like to know what does Count and % indicate? Whether Count is count of IP address occurred for a given time/date range?&lt;/P&gt;

&lt;P&gt;Please guide me.&lt;/P&gt;

&lt;P&gt;Regards,&lt;BR /&gt;
Sushma.&lt;/P&gt;</description>
      <pubDate>Thu, 19 Apr 2018 07:59:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Question-on-Selected-fields-in-fields-side-bar/m-p/341871#M170177</guid>
      <dc:creator>muralisushma7</dc:creator>
      <dc:date>2018-04-19T07:59:47Z</dc:date>
    </item>
    <item>
      <title>Re: Question on Selected fields in fields side bar</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Question-on-Selected-fields-in-fields-side-bar/m-p/341872#M170178</link>
      <description>&lt;P&gt;Yes. The count is occurrence of field value and % shows field appears in over % of events.&lt;/P&gt;</description>
      <pubDate>Thu, 19 Apr 2018 08:31:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Question-on-Selected-fields-in-fields-side-bar/m-p/341872#M170178</guid>
      <dc:creator>p_gurav</dc:creator>
      <dc:date>2018-04-19T08:31:00Z</dc:date>
    </item>
  </channel>
</rss>

