https://community.splunk.com/t5/Splunk-Search/How-to-display-message-related-to-particular-fields/m-p/90436#M23235 <P>Use the following command to get a list which contains pages and max likes as columns :</P> <PRE><CODE>.... | chart max(likes) AS Likes by page </CODE></PRE> <P>Have a look at following Splunk Documentation :<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/5.0.3/SearchReference/CommonStatsFunctions">link text</A> </P> Wed, 10 Jul 2013 06:10:59 GMT ranjyotiprakash 2013-07-10T06:10:59Z https://community.splunk.com/t5/Splunk-Search/How-to-display-message-related-to-particular-fields/m-p/90435#M23234 <P>page="MIR" postid="2824567904373133_10151428930538134" message="Foot stools from MI..." time="2013-01-21" likes="188" comments="9" fromid="282904373133" picCount="1" videocount="0" linlcount="0" shares="0"</P> <P>tried this query: sourcetype="..." |stats max(likes) as likes by page| table page,likes, message</P> <P>My intention is to display a message with max likes but the above query does not work</P> Wed, 10 Jul 2013 05:50:06 GMT https://community.splunk.com/t5/Splunk-Search/How-to-display-message-related-to-particular-fields/m-p/90435#M23234 manohart31 2013-07-10T05:50:06Z https://community.splunk.com/t5/Splunk-Search/How-to-display-message-related-to-particular-fields/m-p/90436#M23235 <P>Use the following command to get a list which contains pages and max likes as columns :</P> <PRE><CODE>.... | chart max(likes) AS Likes by page </CODE></PRE> <P>Have a look at following Splunk Documentation :<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/5.0.3/SearchReference/CommonStatsFunctions">link text</A> </P> Wed, 10 Jul 2013 06:10:59 GMT https://community.splunk.com/t5/Splunk-Search/How-to-display-message-related-to-particular-fields/m-p/90436#M23235 ranjyotiprakash 2013-07-10T06:10:59Z