topic How to find Fieldnames which have some strings in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-find-Fieldnames-which-have-some-strings/m-p/636956#M221183 <P>If there are events like these.<BR />And I want&nbsp; to find Fieldnames which have "abc"<BR /><BR /></P><P><STRONG>Event 1&nbsp;</STRONG></P><P>File : abcdefg</P><P>URL : 1232323232.com</P><P>NUM : 1234567899</P><P>Name : James<BR /><BR /></P><P><STRONG>Event 2</STRONG></P><P>File : abcdefg</P><P>URL : 1232323232.abc</P><P>NUM : 1234567899</P><P>Name : James<BR /><BR /></P><P>&nbsp;</P><P>File has "abc" 2 times and URL has "abc" 1 time.<BR />I want result like this<BR /><BR /></P><TABLE border="1" width="100%"><TBODY><TR><TD width="50%">FieldName</TD><TD width="50%">Count</TD></TR><TR><TD width="50%">File</TD><TD width="50%">2</TD></TR><TR><TD width="50%">URL</TD><TD width="50%">1</TD></TR></TBODY></TABLE><P><BR /><BR />How can I make this result by SPL?</P> Fri, 31 Mar 2023 18:47:51 GMT zegg 2023-03-31T18:47:51Z How to find Fieldnames which have some strings https://community.splunk.com/t5/Splunk-Search/How-to-find-Fieldnames-which-have-some-strings/m-p/636956#M221183 <P>If there are events like these.<BR />And I want&nbsp; to find Fieldnames which have "abc"<BR /><BR /></P><P><STRONG>Event 1&nbsp;</STRONG></P><P>File : abcdefg</P><P>URL : 1232323232.com</P><P>NUM : 1234567899</P><P>Name : James<BR /><BR /></P><P><STRONG>Event 2</STRONG></P><P>File : abcdefg</P><P>URL : 1232323232.abc</P><P>NUM : 1234567899</P><P>Name : James<BR /><BR /></P><P>&nbsp;</P><P>File has "abc" 2 times and URL has "abc" 1 time.<BR />I want result like this<BR /><BR /></P><TABLE border="1" width="100%"><TBODY><TR><TD width="50%">FieldName</TD><TD width="50%">Count</TD></TR><TR><TD width="50%">File</TD><TD width="50%">2</TD></TR><TR><TD width="50%">URL</TD><TD width="50%">1</TD></TR></TBODY></TABLE><P><BR /><BR />How can I make this result by SPL?</P> Fri, 31 Mar 2023 18:47:51 GMT https://community.splunk.com/t5/Splunk-Search/How-to-find-Fieldnames-which-have-some-strings/m-p/636956#M221183 zegg 2023-03-31T18:47:51Z Re: How to find Fieldnames which have some strings https://community.splunk.com/t5/Splunk-Search/How-to-find-Fieldnames-which-have-some-strings/m-p/636972#M221185 <LI-CODE lang="markup">| foreach * [| eval &lt;&lt;FIELD&gt;&gt;=if(like(&lt;&lt;FIELD&gt;&gt;,"%abc%"),1,null())] | stats sum(*) as *</LI-CODE> Fri, 31 Mar 2023 19:54:28 GMT https://community.splunk.com/t5/Splunk-Search/How-to-find-Fieldnames-which-have-some-strings/m-p/636972#M221185 ITWhisperer 2023-03-31T19:54:28Z