https://community.splunk.com/t5/Splunk-Search/Help-with-query/m-p/567315#M197694 <P>Without understanding the data, or the search your working with...<BR /><BR />| <EM>your search</EM><BR />| stats count by name, serial_number, name_number<BR />| search count&gt;1<BR /><BR />Any records that have identical names/serial number will show up.&nbsp; You can adjust this as follows:</P><P>| <EM>your search</EM><BR />| stats count as count, values(serial_number) as serial_number, values(name_number) by name,<BR />| search count&gt;1</P><P>That would show if there we hosts with the same name, but might have different serial numbers.&nbsp;<BR /><BR /><BR /></P> Thu, 16 Sep 2021 19:51:06 GMT solarboyz1 2021-09-16T19:51:06Z https://community.splunk.com/t5/Splunk-Search/Help-with-query/m-p/567283#M197685 <P>Hello - I am new to splunk and am trying to do a search on data that calls out three different fields for duplicates so I can make a report out of that. Two of the fields are the name and serial number, and the third field is the name and serial number combined. Any help is appreciated, thanks.</P> Thu, 16 Sep 2021 15:54:20 GMT https://community.splunk.com/t5/Splunk-Search/Help-with-query/m-p/567283#M197685 dmtman 2021-09-16T15:54:20Z https://community.splunk.com/t5/Splunk-Search/Help-with-query/m-p/567315#M197694 <P>Without understanding the data, or the search your working with...<BR /><BR />| <EM>your search</EM><BR />| stats count by name, serial_number, name_number<BR />| search count&gt;1<BR /><BR />Any records that have identical names/serial number will show up.&nbsp; You can adjust this as follows:</P><P>| <EM>your search</EM><BR />| stats count as count, values(serial_number) as serial_number, values(name_number) by name,<BR />| search count&gt;1</P><P>That would show if there we hosts with the same name, but might have different serial numbers.&nbsp;<BR /><BR /><BR /></P> Thu, 16 Sep 2021 19:51:06 GMT https://community.splunk.com/t5/Splunk-Search/Help-with-query/m-p/567315#M197694 solarboyz1 2021-09-16T19:51:06Z https://community.splunk.com/t5/Splunk-Search/Help-with-query/m-p/567317#M197695 <P>What exactly do you mean by duplicates? A value that appears more than once in a given field (column)? Or a combined set of values from all fields?</P> Thu, 16 Sep 2021 20:06:13 GMT https://community.splunk.com/t5/Splunk-Search/Help-with-query/m-p/567317#M197695 PickleRick 2021-09-16T20:06:13Z