topic Re: Give me a count of all events but give me the date of the last event? in Splunk Search https://community.splunk.com/t5/Splunk-Search/Give-me-a-count-of-all-events-but-give-me-the-date-of-the-last/m-p/107189#M27868 <P>Thank you, Ayn!!!!!</P> Thu, 31 Jan 2013 22:39:03 GMT the_wolverine 2013-01-31T22:39:03Z Give me a count of all events but give me the date of the last event? https://community.splunk.com/t5/Splunk-Search/Give-me-a-count-of-all-events-but-give-me-the-date-of-the-last/m-p/107185#M27864 <P>I'm generating a table of event count (same events) but I want it to also return the timestamp of the last event. I can't figure out how to do it. Running stats count against timestamp will give me a single count for each timestamp.</P> <P>timestamp,color,shape,count<BR /> ?,blue,square,5<BR /> ?,red,circle,15<BR /> ?,yellow,triangle,12</P> <P>Help?</P> Thu, 31 Jan 2013 22:05:10 GMT https://community.splunk.com/t5/Splunk-Search/Give-me-a-count-of-all-events-but-give-me-the-date-of-the-last/m-p/107185#M27864 the_wolverine 2013-01-31T22:05:10Z Re: Give me a count of all events but give me the date of the last event? https://community.splunk.com/t5/Splunk-Search/Give-me-a-count-of-all-events-but-give-me-the-date-of-the-last/m-p/107186#M27865 <PRE><CODE>... | stats count, latest(_time) </CODE></PRE> <P>?</P> Thu, 31 Jan 2013 22:09:24 GMT https://community.splunk.com/t5/Splunk-Search/Give-me-a-count-of-all-events-but-give-me-the-date-of-the-last/m-p/107186#M27865 Ayn 2013-01-31T22:09:24Z Re: Give me a count of all events but give me the date of the last event? https://community.splunk.com/t5/Splunk-Search/Give-me-a-count-of-all-events-but-give-me-the-date-of-the-last/m-p/107187#M27866 <P>I think I oversimplified my example. I have a few fields in there so there are a couple of eventtypes, actually.</P> Thu, 31 Jan 2013 22:19:12 GMT https://community.splunk.com/t5/Splunk-Search/Give-me-a-count-of-all-events-but-give-me-the-date-of-the-last/m-p/107187#M27866 the_wolverine 2013-01-31T22:19:12Z Re: Give me a count of all events but give me the date of the last event? https://community.splunk.com/t5/Splunk-Search/Give-me-a-count-of-all-events-but-give-me-the-date-of-the-last/m-p/107188#M27867 <P>Well then, stats count, latest(_time) by color,shape</P> Thu, 31 Jan 2013 22:25:42 GMT https://community.splunk.com/t5/Splunk-Search/Give-me-a-count-of-all-events-but-give-me-the-date-of-the-last/m-p/107188#M27867 Ayn 2013-01-31T22:25:42Z Re: Give me a count of all events but give me the date of the last event? https://community.splunk.com/t5/Splunk-Search/Give-me-a-count-of-all-events-but-give-me-the-date-of-the-last/m-p/107189#M27868 <P>Thank you, Ayn!!!!!</P> Thu, 31 Jan 2013 22:39:03 GMT https://community.splunk.com/t5/Splunk-Search/Give-me-a-count-of-all-events-but-give-me-the-date-of-the-last/m-p/107189#M27868 the_wolverine 2013-01-31T22:39:03Z