topic Re: I need the count based on sub_gruop please can any one help me in Splunk Search

How to get the count based on sub_group?

ramkyreddy — Tue, 13 Sep 2022 13:53:00 GMT

platfrom bkc_name domain testcase_id
tnl abzke hef gh_102

asc kit1 touch ig_103

sou kit2 hub jk_104

img kit3 hub1 lk_105

-------------------------------

sub_gruop platfrom bkc_name domain testcase_id

wow 20 19 15 12

audio 10 16 11 13

sound 25 30 18 19

Re: I need the count based on sub_gruop please can any one help me

bowesmana — Tue, 23 Aug 2022 04:52:31 GMT

Can you explain your example. What is the first section - there are no values there, so what count do you want. What do the numbers in the second section mean? e.g. what is wow/platform value of 20?

Re: I need the count based on sub_gruop please can any one help me

ramkyreddy — Tue, 13 Sep 2022 13:51:13 GMT

In the input table i have 4 subgroups, keep subgroup as its same as in output,
but i need count for platform, akc_name, station ,domain, testcase_id as i mentioned in output

INPUT
-----

ineed count like this

Re: I need the count based on sub_gruop please can any one help me

bowesmana — Tue, 23 Aug 2022 22:26:06 GMT

I'm afraid you'll have to be a bit clearer. Although you say "keep subgroup same as in output", you input and output show different values for sub groups, none of the sub_group names in the INPUT appear in the OUTPUT

INPUT

CVB-Driver
RFT-Driver
Touch-rpl
PSC-Firmwar

OUTPUT

HEF-Driver
VPU-Driver
iTouch rpl
CPS-Firmware

Also your image shows a subgroup of WOV with Total, Planned and Automated - how are these values calculated and from what data and how do those numbers relate to the columns in your output

platform akc_name station domain Testcase_id

It's likely that a simple "stats count ... by sub_groups" will be the answer, but there is just not enough information to provide a clear answer.

Re: I need the count based on sub_gruop please can any one help me

ramkyreddy — Tue, 13 Sep 2022 13:50:24 GMT

let me explain i have this table i need count for platfrom, stationnam by subgroup this is my input.

--------

output
-----------

like this i need output i think you got clear understand right.

Re: I need the count based on sub_gruop please can any one help me

bowesmana — Wed, 24 Aug 2022 23:46:25 GMT

Sorry, it's still unclear - please can you say what the 3 values in each of the columns is counting.

For example, you have 369 against WOV - what does that 369 represent in each of the 3 columns? The platform value in your example is 'adl'. How do you want to count 'platform'

What about the TCSS row - what have you counted to get 136, 100 and 60 values in there?

In your example data you have two rows. If you "count" those rows, would you end up with

TCSS 2 2

which is showing 2 _different_ values of platform and 2 _different_ values of station_name

Re: I need the count based on sub_gruop please can any one help me

ramkyreddy — Fri, 02 Sep 2022 06:26:24 GMT

Thanks, i made it using stats count by sub group (using sub search) its working.