https://community.splunk.com/t5/Splunk-Search/Help-with-search-query-to-table-single-occurrence-rows/m-p/165003#M46866 <P>try to use "| dedup ID" search command</P> Thu, 31 Jul 2014 05:51:28 GMT changwoo 2014-07-31T05:51:28Z https://community.splunk.com/t5/Splunk-Search/Help-with-search-query-to-table-single-occurrence-rows/m-p/165002#M46865 <P>Hello All,</P> <P>I have table of data as below. I have to fetch single occurrence row. Please Help</P> <P>Original Table </P> <P>ID CA Value GrName UsrName DB Name</P> <P>X1 CA1 CA1 Usr1 …</P> <P>X2 CA2 CA2 Usr2 …</P> <P>X2 CA2 CA2 Usr2 …</P> <P>X3 CA5 CA5 Usr3 …</P> <P>X3 CA5 CA5 Usr3 …</P> <P>X3 CA5 CA5 Usr3 …</P> <P>X4 CA7 CA7 Usr4 …</P> <P>X4 CA7 CA7 Usr4 …</P> <P>X5 CA9 CA9 Usr5 …</P> <P>Desired Result Table</P> <P>ID CA Value GrName UsrName DB Name</P> <P>X1 CA1 CA1 Usr1 …</P> <P>X5 CA9 CA9 Usr5 …</P> <P>Thanks</P> <P>Sathish R</P> Thu, 31 Jul 2014 04:43:05 GMT https://community.splunk.com/t5/Splunk-Search/Help-with-search-query-to-table-single-occurrence-rows/m-p/165002#M46865 rsathish47 2014-07-31T04:43:05Z https://community.splunk.com/t5/Splunk-Search/Help-with-search-query-to-table-single-occurrence-rows/m-p/165003#M46866 <P>try to use "| dedup ID" search command</P> Thu, 31 Jul 2014 05:51:28 GMT https://community.splunk.com/t5/Splunk-Search/Help-with-search-query-to-table-single-occurrence-rows/m-p/165003#M46866 changwoo 2014-07-31T05:51:28Z https://community.splunk.com/t5/Splunk-Search/Help-with-search-query-to-table-single-occurrence-rows/m-p/165004#M46867 <P>Thanks Changwoo.. I need single occurrence row not unique row.</P> Thu, 31 Jul 2014 06:31:34 GMT https://community.splunk.com/t5/Splunk-Search/Help-with-search-query-to-table-single-occurrence-rows/m-p/165004#M46867 rsathish47 2014-07-31T06:31:34Z https://community.splunk.com/t5/Splunk-Search/Help-with-search-query-to-table-single-occurrence-rows/m-p/165005#M46868 <P>Hello Sathish,<BR /> Try the below one.</P> <PRE><CODE>source=blah.. |stats list(*) as * by ID|eval a=mvcount(CA)|where a=1 </CODE></PRE> <P>This will give you single occurrence of ID field.</P> <P>Thanks,<BR /> L </P> Thu, 31 Jul 2014 06:52:53 GMT https://community.splunk.com/t5/Splunk-Search/Help-with-search-query-to-table-single-occurrence-rows/m-p/165005#M46868 linu1988 2014-07-31T06:52:53Z https://community.splunk.com/t5/Splunk-Search/Help-with-search-query-to-table-single-occurrence-rows/m-p/165006#M46869 <P>Thanks for the workaround.. It Works</P> Thu, 31 Jul 2014 07:16:06 GMT https://community.splunk.com/t5/Splunk-Search/Help-with-search-query-to-table-single-occurrence-rows/m-p/165006#M46869 rsathish47 2014-07-31T07:16:06Z