https://community.splunk.com/t5/Splunk-Search/multi-pattern-string-calculation-on-fields-and-count-the-fields/m-p/148773#M41585 <P>I think you want to use <STRONG>extract(kv)</STRONG>. This should give you fields for any dynamic range of files in the counts field</P> <PRE><CODE>...| rex "Counts=\[(?&lt;Counts&gt;[^\]]+)\]" | field _time Counts|extract pairdelim="," kvdelim="=" | fields _time 100* | stats count(*) as * by _time </CODE></PRE> Thu, 30 Jul 2015 23:09:31 GMT bmacias84 2015-07-30T23:09:31Z https://community.splunk.com/t5/Splunk-Search/multi-pattern-string-calculation-on-fields-and-count-the-fields/m-p/148772#M41584 <P>I have log coming in this format. this value is dynamic and keep changing in terms of Form and numbers<BR /> Counts=[100A=10,100B=1,100C=2,100D=1,100E=3,100A=20,100B=1,100C=2,100D=1,100E=3]</P> <P>I want to calculate <BR /> 100A=30<BR /> 100B=2<BR /> 100C=4<BR /> 100D=2<BR /> 100E=6</P> <P>I have ask similar question where I have different requirements <BR /> <A href="http://answers.splunk.com/answers/185780/multi-pattern-string-calculation-on-fields.html">http://answers.splunk.com/answers/185780/multi-pattern-string-calculation-on-fields.html</A></P> Thu, 30 Jul 2015 22:21:31 GMT https://community.splunk.com/t5/Splunk-Search/multi-pattern-string-calculation-on-fields-and-count-the-fields/m-p/148772#M41584 sumitnagal 2015-07-30T22:21:31Z https://community.splunk.com/t5/Splunk-Search/multi-pattern-string-calculation-on-fields-and-count-the-fields/m-p/148773#M41585 <P>I think you want to use <STRONG>extract(kv)</STRONG>. This should give you fields for any dynamic range of files in the counts field</P> <PRE><CODE>...| rex "Counts=\[(?&lt;Counts&gt;[^\]]+)\]" | field _time Counts|extract pairdelim="," kvdelim="=" | fields _time 100* | stats count(*) as * by _time </CODE></PRE> Thu, 30 Jul 2015 23:09:31 GMT https://community.splunk.com/t5/Splunk-Search/multi-pattern-string-calculation-on-fields-and-count-the-fields/m-p/148773#M41585 bmacias84 2015-07-30T23:09:31Z