<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Adding field to results of count querry in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Adding-field-to-results-of-count-querry/m-p/45033#M179264</link>
    <description>&lt;P&gt;This worked thank you&lt;/P&gt;</description>
    <pubDate>Tue, 19 Jul 2011 16:30:23 GMT</pubDate>
    <dc:creator>TomCollick</dc:creator>
    <dc:date>2011-07-19T16:30:23Z</dc:date>
    <item>
      <title>Adding field to results of count querry</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Adding-field-to-results-of-count-querry/m-p/45031#M179262</link>
      <description>&lt;P&gt;How would I add field x to the results of count(y) as z so that the results are&lt;BR /&gt;
x      z      count(y)? I know it is simple but it eludes me. &lt;BR /&gt;
thank you&lt;/P&gt;</description>
      <pubDate>Tue, 19 Jul 2011 13:17:32 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Adding-field-to-results-of-count-querry/m-p/45031#M179262</guid>
      <dc:creator>TomCollick</dc:creator>
      <dc:date>2011-07-19T13:17:32Z</dc:date>
    </item>
    <item>
      <title>Re: Adding field to results of count querry</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Adding-field-to-results-of-count-querry/m-p/45032#M179263</link>
      <description>&lt;P&gt;try this&lt;/P&gt;

&lt;P&gt;mysearch | stats count(y) AS COUNTy | eval z=(COUNTy+x) | table x z COUNTy&lt;/P&gt;</description>
      <pubDate>Tue, 19 Jul 2011 14:45:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Adding-field-to-results-of-count-querry/m-p/45032#M179263</guid>
      <dc:creator>RicoSuave</dc:creator>
      <dc:date>2011-07-19T14:45:52Z</dc:date>
    </item>
    <item>
      <title>Re: Adding field to results of count querry</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Adding-field-to-results-of-count-querry/m-p/45033#M179264</link>
      <description>&lt;P&gt;This worked thank you&lt;/P&gt;</description>
      <pubDate>Tue, 19 Jul 2011 16:30:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Adding-field-to-results-of-count-querry/m-p/45033#M179264</guid>
      <dc:creator>TomCollick</dc:creator>
      <dc:date>2011-07-19T16:30:23Z</dc:date>
    </item>
    <item>
      <title>Re: Adding field to results of count querry</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Adding-field-to-results-of-count-querry/m-p/45034#M179265</link>
      <description>&lt;P&gt;Awesome, please accept my answer &lt;span class="lia-unicode-emoji" title=":grinning_face_with_smiling_eyes:"&gt;😄&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 19 Jul 2011 17:55:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Adding-field-to-results-of-count-querry/m-p/45034#M179265</guid>
      <dc:creator>RicoSuave</dc:creator>
      <dc:date>2011-07-19T17:55:36Z</dc:date>
    </item>
  </channel>
</rss>

