https://community.splunk.com/t5/Splunk-Search/Query-for-eventcount/m-p/433430#M172680 <P>hi @vijaysri </P> <P><A href="https://docs.splunk.com/Documentation/Splunk/7.2.4/SearchReference/Eventcount">https://docs.splunk.com/Documentation/Splunk/7.2.4/SearchReference/Eventcount</A></P> Thu, 07 Mar 2019 13:09:38 GMT harishalipaka 2019-03-07T13:09:38Z https://community.splunk.com/t5/Splunk-Search/Query-for-eventcount/m-p/433429#M172679 <P>I have a lookup file with indexes in it, I want a query i need the eventcount of the indexes mentioned in the lookup table for 24 hrs</P> Thu, 07 Mar 2019 12:28:48 GMT https://community.splunk.com/t5/Splunk-Search/Query-for-eventcount/m-p/433429#M172679 VijaySrrie 2019-03-07T12:28:48Z https://community.splunk.com/t5/Splunk-Search/Query-for-eventcount/m-p/433430#M172680 <P>hi @vijaysri </P> <P><A href="https://docs.splunk.com/Documentation/Splunk/7.2.4/SearchReference/Eventcount">https://docs.splunk.com/Documentation/Splunk/7.2.4/SearchReference/Eventcount</A></P> Thu, 07 Mar 2019 13:09:38 GMT https://community.splunk.com/t5/Splunk-Search/Query-for-eventcount/m-p/433430#M172680 harishalipaka 2019-03-07T13:09:38Z https://community.splunk.com/t5/Splunk-Search/Query-for-eventcount/m-p/433431#M172681 <P>This should get you going in the right direction.</P> <PRE><CODE>| tstats count where [|inputlookup indexes.csv | fields index | format] by index </CODE></PRE> Thu, 07 Mar 2019 13:50:44 GMT https://community.splunk.com/t5/Splunk-Search/Query-for-eventcount/m-p/433431#M172681 richgalloway 2019-03-07T13:50:44Z