https://community.splunk.com/t5/Splunk-Search/Getting-unique-values-of-a-field/m-p/695283#M236432 <P class="lia-align-left">The Splunk Enterprise version 5.0 documentation from 2012 is no longer available. Similar information is available in newer versions of the Splunk documentation. Replace "5.0" in the URL with "latest" or a more recent version number to view the topics.&nbsp;</P><P class="lia-align-left">dedup:&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Dedup" target="_blank">https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Dedup</A>&nbsp;</P><P class="lia-align-left">stats:&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/CommonStatsFunctions" target="_blank">https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/CommonStatsFunctions</A>&nbsp;</P> Mon, 05 Aug 2024 15:09:15 GMT andrewb_splunk 2024-08-05T15:09:15Z https://community.splunk.com/t5/Splunk-Search/Getting-unique-values-of-a-field/m-p/97728#M25213 <P>Hi all. I have a field called TaskAction that has some 400 values. But, I only want the distinct values of that field.</P> <P>Plz help me with the query.</P> Mon, 11 Jan 2021 19:07:13 GMT https://community.splunk.com/t5/Splunk-Search/Getting-unique-values-of-a-field/m-p/97728#M25213 splunkpoornima 2021-01-11T19:07:13Z https://community.splunk.com/t5/Splunk-Search/Getting-unique-values-of-a-field/m-p/97729#M25214 <P>There's <A href="http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/Dedup">dedup</A>, and there's also the <A href="http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/CommonStatsFunctions">stats</A> operator <CODE>values</CODE>.</P> Mon, 22 Oct 2012 05:18:55 GMT https://community.splunk.com/t5/Splunk-Search/Getting-unique-values-of-a-field/m-p/97729#M25214 Ayn 2012-10-22T05:18:55Z https://community.splunk.com/t5/Splunk-Search/Getting-unique-values-of-a-field/m-p/97730#M25215 <P><CODE>stats values(field)</CODE> is what I used.</P> Thu, 01 Nov 2012 14:59:02 GMT https://community.splunk.com/t5/Splunk-Search/Getting-unique-values-of-a-field/m-p/97730#M25215 slierninja 2012-11-01T14:59:02Z https://community.splunk.com/t5/Splunk-Search/Getting-unique-values-of-a-field/m-p/97731#M25216 <P>This seems to work when trying to find unique values for a field, like 'host':<BR /> * | chart count by host</P> Tue, 16 Feb 2016 00:16:59 GMT https://community.splunk.com/t5/Splunk-Search/Getting-unique-values-of-a-field/m-p/97731#M25216 bbialek 2016-02-16T00:16:59Z https://community.splunk.com/t5/Splunk-Search/Getting-unique-values-of-a-field/m-p/695283#M236432 <P class="lia-align-left">The Splunk Enterprise version 5.0 documentation from 2012 is no longer available. Similar information is available in newer versions of the Splunk documentation. Replace "5.0" in the URL with "latest" or a more recent version number to view the topics.&nbsp;</P><P class="lia-align-left">dedup:&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Dedup" target="_blank">https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Dedup</A>&nbsp;</P><P class="lia-align-left">stats:&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/CommonStatsFunctions" target="_blank">https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/CommonStatsFunctions</A>&nbsp;</P> Mon, 05 Aug 2024 15:09:15 GMT https://community.splunk.com/t5/Splunk-Search/Getting-unique-values-of-a-field/m-p/695283#M236432 andrewb_splunk 2024-08-05T15:09:15Z