topic Re: Count per host in Splunk Search

topic Re: Count per host in Splunk Search https://community.splunk.com/t5/Splunk-Search/Count-per-host/m-p/574754#M200286 <P>Hi!! try this:</P><P> </P><LI-CODE lang="markup">your search | streamstats count by host_name | eval host_name=host_name.count | fields - count</LI-CODE><P> </P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rafadvega_0-1636731797517.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/16840i5785655E581FF55E/image-size/medium?v=v2&px=400" role="button" title="rafadvega_0-1636731797517.png" alt="rafadvega_0-1636731797517.png" /></span></P><P> </P> Fri, 12 Nov 2021 15:44:05 GMT rafadvega 2021-11-12T15:44:05Z Count per host https://community.splunk.com/t5/Splunk-Search/Count-per-host/m-p/574749#M200283 <P>I'm trying to rename the IP's of our servers to splunknodes<BR /><BR /></P><P>host_ip host_name</P><TABLE><TBODY><TR><TD>ip-111-11-1-11</TD><TD>Searchhead</TD></TR><TR><TD>ip-111-11-1-12</TD><TD>Searchhead</TD></TR><TR><TD>ip-111-11-1-10</TD><TD>Masternode</TD></TR><TR><TD>ip-111-11-2-11</TD><TD>Indexer</TD></TR><TR><TD>ip-111-11-2-12</TD><TD>Indexer</TD></TR><TR><TD>ip-111-11-2-10</TD><TD>Deploymentserver</TD></TR></TBODY></TABLE><P><BR />How do I get it to count the duplicates?:<BR /><BR /></P><P>host_ip host_name</P><TABLE><TBODY><TR><TD width="122.922px" height="25px">ip-111-11-1-11</TD><TD width="144.516px" height="25px">Searchhead1</TD></TR><TR><TD width="122.922px" height="25px">ip-111-11-1-12</TD><TD width="144.516px" height="25px">Searchhead2</TD></TR><TR><TD width="122.922px" height="25px">ip-111-11-1-10</TD><TD width="144.516px" height="25px">Masternode</TD></TR><TR><TD width="122.922px" height="25px">ip-111-11-2-11</TD><TD width="144.516px" height="25px">Indexer1</TD></TR><TR><TD width="122.922px" height="25px">ip-111-11-2-12</TD><TD width="144.516px" height="25px">Indexer2</TD></TR><TR><TD width="122.922px" height="25px">ip-111-11-2-10</TD><TD width="144.516px" height="25px">Deploymentserver</TD></TR></TBODY></TABLE><P> </P><P>Thanks in advance!</P> Fri, 12 Nov 2021 15:00:55 GMT https://community.splunk.com/t5/Splunk-Search/Count-per-host/m-p/574749#M200283 EH 2021-11-12T15:00:55Z Re: Count per host https://community.splunk.com/t5/Splunk-Search/Count-per-host/m-p/574754#M200286 <P>Hi!! try this:</P><P> </P><LI-CODE lang="markup">your search | streamstats count by host_name | eval host_name=host_name.count | fields - count</LI-CODE><P> </P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rafadvega_0-1636731797517.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/16840i5785655E581FF55E/image-size/medium?v=v2&px=400" role="button" title="rafadvega_0-1636731797517.png" alt="rafadvega_0-1636731797517.png" /></span></P><P> </P> Fri, 12 Nov 2021 15:44:05 GMT https://community.splunk.com/t5/Splunk-Search/Count-per-host/m-p/574754#M200286 rafadvega 2021-11-12T15:44:05Z