https://community.splunk.com/t5/Splunk-Search/How-can-I-count-my-logins-by-a-field/m-p/602878#M209834 <P>I have this query and&nbsp;I want to count how many logins were made by id, like if a person logged in 3 times I just want to count once and if there were 15 logins in total I just want to count one per id</P><LI-CODE lang="markup">basic search | fields idLogin | stats values(idLogin) as Login, dc(idLogin) as Quantity | table Quantity</LI-CODE><P>&nbsp; but my field idLogin is return null&nbsp;</P> Thu, 23 Jun 2022 00:22:51 GMT rebecalopes241 2022-06-23T00:22:51Z https://community.splunk.com/t5/Splunk-Search/How-can-I-count-my-logins-by-a-field/m-p/602878#M209834 <P>I have this query and&nbsp;I want to count how many logins were made by id, like if a person logged in 3 times I just want to count once and if there were 15 logins in total I just want to count one per id</P><LI-CODE lang="markup">basic search | fields idLogin | stats values(idLogin) as Login, dc(idLogin) as Quantity | table Quantity</LI-CODE><P>&nbsp; but my field idLogin is return null&nbsp;</P> Thu, 23 Jun 2022 00:22:51 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-count-my-logins-by-a-field/m-p/602878#M209834 rebecalopes241 2022-06-23T00:22:51Z https://community.splunk.com/t5/Splunk-Search/How-can-I-count-my-logins-by-a-field/m-p/602921#M209844 <P>Your requirement seems self-contradictory - are you wanting the number of times each id was used to login or just a list of the ids used to login?</P><P>First case:</P><LI-CODE lang="markup">| stats count by loginid</LI-CODE><P>Second case:</P><LI-CODE lang="markup">| dedup loginid | table loginid</LI-CODE><P>&nbsp;</P> Thu, 23 Jun 2022 06:36:04 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-count-my-logins-by-a-field/m-p/602921#M209844 ITWhisperer 2022-06-23T06:36:04Z