https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117434#M183983 <P>For exmaple:</P> <P><A href="http://www.host.com">www.host.com</A> = 2<BR /> host.com = 1 </P> <P>Is there an easy eval command to count the number of occurrences of a particular character in a event?</P> <P>Thank you,</P> Wed, 02 Apr 2014 17:40:12 GMT splunkranger 2014-04-02T17:40:12Z https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117434#M183983 <P>For exmaple:</P> <P><A href="http://www.host.com">www.host.com</A> = 2<BR /> host.com = 1 </P> <P>Is there an easy eval command to count the number of occurrences of a particular character in a event?</P> <P>Thank you,</P> Wed, 02 Apr 2014 17:40:12 GMT https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117434#M183983 splunkranger 2014-04-02T17:40:12Z https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117435#M183984 <P>someone else had this issue, and this worked for them:<BR /> <A href="http://answers.splunk.com/answers/28276/count-of-character-in-field">http://answers.splunk.com/answers/28276/count-of-character-in-field</A></P> Wed, 02 Apr 2014 17:45:55 GMT https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117435#M183984 aelliott 2014-04-02T17:45:55Z https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117436#M183985 <P>Perfect! thank you!</P> Wed, 02 Apr 2014 17:58:48 GMT https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117436#M183985 splunkranger 2014-04-02T17:58:48Z https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117437#M183986 <P>Hello Bro,</P> <P>It was fun to find a solution to your question. I made the below query to check it out. Modify this to your requirement.</P> <P>Run the below query in your splunk search<BR /><BR /> index=main | head 1 | eval custom_test="This . is . Eashwar . Raghunathan . and . i . am . playing . with . 10 . dots" | rex mode=sed field=custom_test "s/[^.]/X/g s/X//g" | eval NumberOfDots=len(custom_test) | table custom_test NumberOfDots</P> <P>Hope in your case you will pass the string domain instead of custom_test</P> <P>Happy splunking bro, thanks for asking tough questions <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Mon, 28 Sep 2020 16:18:16 GMT https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117437#M183986 eashwar 2020-09-28T16:18:16Z https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117438#M183987 <P>You could just have "s/[^.]//g" in your sed</P> Wed, 02 Apr 2014 20:52:55 GMT https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117438#M183987 aelliott 2014-04-02T20:52:55Z https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117439#M183988 <P>Hey i did it first, for some reason it did not work. It was unusual, so i was trying a couple of other ways to achieve the same</P> Thu, 03 Apr 2014 05:57:41 GMT https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117439#M183988 eashwar 2014-04-03T05:57:41Z https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117440#M183989 <P>Hello AELLIOTT it is working now for me, I don't know why it did not work yesterday <span class="lia-unicode-emoji" title=":disappointed_face:">😞</span> ... Confused</P> Thu, 03 Apr 2014 08:10:33 GMT https://community.splunk.com/t5/Splunk-Search/How-to-count-the-number-of-dots-in-a-domain-name/m-p/117440#M183989 eashwar 2014-04-03T08:10:33Z