https://community.splunk.com/t5/Splunk-Search/Using-StreamStats-Other-commands/m-p/136497#M37350 <P>Hi All,<BR /> I have data like following in need to get the differents count. Count will get reset in certain time period. Please help</P> <P>Expample Data</P> <P>Time Count Server</P> <P>1 0 A</P> <P>1 2 B</P> <P>1 8 C</P> <P>1 1 D</P> <P>2 2 A</P> <P>2 4 B</P> <P>2 0 C</P> <P>2 2 D</P> <P>3 2 A</P> <P>3 2 B</P> <P>3 14 C</P> <P>3 8 D</P> <P>Result Table </P> <P>A =2</P> <P>B = 4</P> <P>C= 14</P> <P>D= 7 </P> <P>Thanks<BR /> Sathish</P> Tue, 23 Sep 2014 12:05:30 GMT rsathish47 2014-09-23T12:05:30Z https://community.splunk.com/t5/Splunk-Search/Using-StreamStats-Other-commands/m-p/136497#M37350 <P>Hi All,<BR /> I have data like following in need to get the differents count. Count will get reset in certain time period. Please help</P> <P>Expample Data</P> <P>Time Count Server</P> <P>1 0 A</P> <P>1 2 B</P> <P>1 8 C</P> <P>1 1 D</P> <P>2 2 A</P> <P>2 4 B</P> <P>2 0 C</P> <P>2 2 D</P> <P>3 2 A</P> <P>3 2 B</P> <P>3 14 C</P> <P>3 8 D</P> <P>Result Table </P> <P>A =2</P> <P>B = 4</P> <P>C= 14</P> <P>D= 7 </P> <P>Thanks<BR /> Sathish</P> Tue, 23 Sep 2014 12:05:30 GMT https://community.splunk.com/t5/Splunk-Search/Using-StreamStats-Other-commands/m-p/136497#M37350 rsathish47 2014-09-23T12:05:30Z https://community.splunk.com/t5/Splunk-Search/Using-StreamStats-Other-commands/m-p/136498#M37351 <P>Not sure why you'd need streamstats. streamstats does not have a time-based window parameter, only number of events.</P> <P>You could simply do</P> <PRE><CODE>... | stats range(Count) as diff by Server </CODE></PRE> Tue, 23 Sep 2014 12:27:26 GMT https://community.splunk.com/t5/Splunk-Search/Using-StreamStats-Other-commands/m-p/136498#M37351 Ayn 2014-09-23T12:27:26Z