https://community.splunk.com/t5/Splunk-Search/Email-count/m-p/669381#M229592 <P>How do I count the number of emails from a search but only get recipients that received ten or more emails?</P> Tue, 21 Nov 2023 18:47:43 GMT Benny611 2023-11-21T18:47:43Z https://community.splunk.com/t5/Splunk-Search/Email-count/m-p/669381#M229592 <P>How do I count the number of emails from a search but only get recipients that received ten or more emails?</P> Tue, 21 Nov 2023 18:47:43 GMT https://community.splunk.com/t5/Splunk-Search/Email-count/m-p/669381#M229592 Benny611 2023-11-21T18:47:43Z https://community.splunk.com/t5/Splunk-Search/Email-count/m-p/669389#M229596 <P>First count the number of recipients then filter out those with fewer than 10.</P><LI-CODE lang="markup">| eventstats dc(emailID) as msg_count by recip | where msg_count &gt;= 10 | stats dc(emailID) as email_count</LI-CODE> Tue, 21 Nov 2023 20:08:24 GMT https://community.splunk.com/t5/Splunk-Search/Email-count/m-p/669389#M229596 richgalloway 2023-11-21T20:08:24Z