<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: how to remove duplicates rows based on all fields, not just one field, and display the unique rows? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-remove-duplicates-rows-based-on-all-fields-not-just-one/m-p/649705#M224641</link>
    <description>&lt;P&gt;The 10 means keep 10 occurrences of the "unique" fields - try&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| dedup field1 field2 ... field10&lt;/LI-CODE&gt;</description>
    <pubDate>Sat, 08 Jul 2023 07:11:14 GMT</pubDate>
    <dc:creator>ITWhisperer</dc:creator>
    <dc:date>2023-07-08T07:11:14Z</dc:date>
    <item>
      <title>How to remove duplicates rows based on all fields, not just one field, and display the unique rows?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-remove-duplicates-rows-based-on-all-fields-not-just-one/m-p/649679#M224636</link>
      <description>&lt;P&gt;how to remove duplicates rows based on all fields, not just one field, and display the unique rows?&lt;BR /&gt;Let say there are 10 fields, when I used | dedup 10 field1, field2, ..&amp;nbsp; field 10,&amp;nbsp; the result missed some unique rows&lt;BR /&gt;&lt;BR /&gt;Please help. Thank you&lt;/P&gt;</description>
      <pubDate>Mon, 10 Jul 2023 16:11:25 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-remove-duplicates-rows-based-on-all-fields-not-just-one/m-p/649679#M224636</guid>
      <dc:creator>LearningGuy</dc:creator>
      <dc:date>2023-07-10T16:11:25Z</dc:date>
    </item>
    <item>
      <title>Re: how to remove duplicates rows based on all fields, not just one field, and display the unique rows?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-remove-duplicates-rows-based-on-all-fields-not-just-one/m-p/649688#M224637</link>
      <description>Hi&lt;BR /&gt;You could do “dedup _raw”&lt;BR /&gt;r. Ismo</description>
      <pubDate>Fri, 07 Jul 2023 21:29:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-remove-duplicates-rows-based-on-all-fields-not-just-one/m-p/649688#M224637</guid>
      <dc:creator>isoutamo</dc:creator>
      <dc:date>2023-07-07T21:29:13Z</dc:date>
    </item>
    <item>
      <title>Re: how to remove duplicates rows based on all fields, not just one field, and display the unique rows?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-remove-duplicates-rows-based-on-all-fields-not-just-one/m-p/649705#M224641</link>
      <description>&lt;P&gt;The 10 means keep 10 occurrences of the "unique" fields - try&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| dedup field1 field2 ... field10&lt;/LI-CODE&gt;</description>
      <pubDate>Sat, 08 Jul 2023 07:11:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-remove-duplicates-rows-based-on-all-fields-not-just-one/m-p/649705#M224641</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2023-07-08T07:11:14Z</dc:date>
    </item>
  </channel>
</rss>

