topic Re: unique values in Splunk Search https://community.splunk.com/t5/Splunk-Search/unique-values/m-p/749195#M242108 <P>Thank you!&nbsp; it works perfect!&nbsp;</P> Thu, 03 Jul 2025 14:38:35 GMT rcbutterfield 2025-07-03T14:38:35Z unique values https://community.splunk.com/t5/Splunk-Search/unique-values/m-p/749188#M242106 <P>Hello Splunk People....</P><P>I want to return a search within splunk.&nbsp; THe index is wineventlogs and i want to return all the eventcodes within eventtypes.&nbsp;&nbsp;</P><P>Meaning....&nbsp;</P><P>Eventtype A includes eventcode 5144, 5145, 5146</P><P>Eventtype b includes eventcode 5144, 5166, 5167</P><P>As examples....&nbsp; &nbsp;thanks to all</P> Thu, 03 Jul 2025 14:12:13 GMT https://community.splunk.com/t5/Splunk-Search/unique-values/m-p/749188#M242106 rcbutterfield 2025-07-03T14:12:13Z Re: unique values https://community.splunk.com/t5/Splunk-Search/unique-values/m-p/749189#M242107 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/309184">@rcbutterfield</a>&nbsp;,</P><P>you should try something like this:</P><LI-CODE lang="markup">index=wineventlog | stats values(EventCode) AS EventCode count By eventtype</LI-CODE><P>Ciao.</P><P>Giuseppe</P> Thu, 03 Jul 2025 14:14:54 GMT https://community.splunk.com/t5/Splunk-Search/unique-values/m-p/749189#M242107 gcusello 2025-07-03T14:14:54Z Re: unique values https://community.splunk.com/t5/Splunk-Search/unique-values/m-p/749195#M242108 <P>Thank you!&nbsp; it works perfect!&nbsp;</P> Thu, 03 Jul 2025 14:38:35 GMT https://community.splunk.com/t5/Splunk-Search/unique-values/m-p/749195#M242108 rcbutterfield 2025-07-03T14:38:35Z Re: unique values https://community.splunk.com/t5/Splunk-Search/unique-values/m-p/749201#M242109 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/309184">@rcbutterfield</a>&nbsp;,</P><P>good for you, see next time!</P><P>Ciao and happy splunking</P><P>Giuseppe</P><P>P.S.: Karma Points are appreciated <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Thu, 03 Jul 2025 15:06:11 GMT https://community.splunk.com/t5/Splunk-Search/unique-values/m-p/749201#M242109 gcusello 2025-07-03T15:06:11Z