https://community.splunk.com/t5/Splunk-Search/How-do-I-get-different-field-values-in-different-fields-that-are/m-p/486314#M193672 <P>Hi @90509,<BR /> I'm not sure to understand your need:</P> <UL> <LI>you want to group your values by name,</LI> <LI>then you want to display all the values of the other fields for each name and eventually the count of occurrencies,</LI> </UL> <P>is this correct?</P> <P>If this is your need, you should run a search like this:</P> <PRE><CODE>index=my_index | stats values(user) AS user values(service) AS service values(device) AS device count BY name </CODE></PRE> <P>Ciao.<BR /> Giuseppe</P> Mon, 18 Nov 2019 10:24:04 GMT gcusello 2019-11-18T10:24:04Z https://community.splunk.com/t5/Splunk-Search/How-do-I-get-different-field-values-in-different-fields-that-are/m-p/486312#M193670 <P>Hi,<BR /> could you please help me with below info:</P> <P>user service name device</P> <P>abc123 baadmin Brahma Louwps121</P> <P>bcx123 admin siva louwps123</P> <P>bxc111 admin Brahma Louwps123</P> <P>abc123 backup vijay Louwps101</P> <P>cxz123 backup Brahma Louwps123</P> <P>cxz123 backup raghu Louwps001</P> <P>czx101 DM1 Brahma Louwps111</P> <P>from this if I need to find out "Brahma" with that field value the remaining filed values that are associated with remaining field values in another fields.</P> Mon, 18 Nov 2019 10:15:46 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-get-different-field-values-in-different-fields-that-are/m-p/486312#M193670 90509 2019-11-18T10:15:46Z https://community.splunk.com/t5/Splunk-Search/How-do-I-get-different-field-values-in-different-fields-that-are/m-p/486313#M193671 <P>try this-</P> <PRE><CODE>|stats values(*) as * by name|where name="Brahma" </CODE></PRE> Mon, 18 Nov 2019 10:20:41 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-get-different-field-values-in-different-fields-that-are/m-p/486313#M193671 493669 2019-11-18T10:20:41Z https://community.splunk.com/t5/Splunk-Search/How-do-I-get-different-field-values-in-different-fields-that-are/m-p/486314#M193672 <P>Hi @90509,<BR /> I'm not sure to understand your need:</P> <UL> <LI>you want to group your values by name,</LI> <LI>then you want to display all the values of the other fields for each name and eventually the count of occurrencies,</LI> </UL> <P>is this correct?</P> <P>If this is your need, you should run a search like this:</P> <PRE><CODE>index=my_index | stats values(user) AS user values(service) AS service values(device) AS device count BY name </CODE></PRE> <P>Ciao.<BR /> Giuseppe</P> Mon, 18 Nov 2019 10:24:04 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-get-different-field-values-in-different-fields-that-are/m-p/486314#M193672 gcusello 2019-11-18T10:24:04Z https://community.splunk.com/t5/Splunk-Search/How-do-I-get-different-field-values-in-different-fields-that-are/m-p/486315#M193673 <P>Thank you . Have a great journey !</P> Wed, 20 Nov 2019 08:08:45 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-get-different-field-values-in-different-fields-that-are/m-p/486315#M193673 90509 2019-11-20T08:08:45Z https://community.splunk.com/t5/Splunk-Search/How-do-I-get-different-field-values-in-different-fields-that-are/m-p/486316#M193674 <P>Thank you . your function is working ,I apologies for not accepting your answer because he has sent first. I hope you have great journey. </P> Wed, 20 Nov 2019 08:10:35 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-get-different-field-values-in-different-fields-that-are/m-p/486316#M193674 90509 2019-11-20T08:10:35Z https://community.splunk.com/t5/Splunk-Search/How-do-I-get-different-field-values-in-different-fields-that-are/m-p/486317#M193675 <P>No problem!<BR /> Anyway, you can upvote other answer!</P> <P>Ciao and next time!<BR /> Giuseppe</P> Wed, 20 Nov 2019 08:44:48 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-get-different-field-values-in-different-fields-that-are/m-p/486317#M193675 gcusello 2019-11-20T08:44:48Z