topic Re: Do I have to turn count and if on like we have to do with delete? in Splunk Search https://community.splunk.com/t5/Splunk-Search/Do-I-have-to-turn-count-and-if-on-like-we-have-to-do-with-delete/m-p/188095#M54193 <P>Sorry I did not know there was a search manual. </P> Wed, 01 Jul 2015 13:26:04 GMT BITSIntern 2015-07-01T13:26:04Z Do I have to turn count and if on like we have to do with delete? https://community.splunk.com/t5/Splunk-Search/Do-I-have-to-turn-count-and-if-on-like-we-have-to-do-with-delete/m-p/188093#M54191 <P>Hi guys,</P> <P>I am having some trouble trying to do a search. I want to do a search that involves the tools <STRONG>count</STRONG> and <STRONG>if</STRONG> but it keeps giving me an error like: Unknown search command 'count'. When I wanted to delete a few things from my index, I had to go to my access controls and turn on the delete command but when I went back I did not see anything about other command functions. </P> <P>Am I doing something wrong or do I need to turn the tools on?</P> <P>Please let me know!</P> Wed, 01 Jul 2015 13:00:16 GMT https://community.splunk.com/t5/Splunk-Search/Do-I-have-to-turn-count-and-if-on-like-we-have-to-do-with-delete/m-p/188093#M54191 BITSIntern 2015-07-01T13:00:16Z Re: Do I have to turn count and if on like we have to do with delete? https://community.splunk.com/t5/Splunk-Search/Do-I-have-to-turn-count-and-if-on-like-we-have-to-do-with-delete/m-p/188094#M54192 <P>count and if are not commands. Stats and eval are, and those use count and if.</P> <P>so....</P> <PRE><CODE>&lt;your_search&gt; | stats count by sourcetype </CODE></PRE> <P>That will get you started.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial">http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial</A></P> Wed, 01 Jul 2015 13:16:02 GMT https://community.splunk.com/t5/Splunk-Search/Do-I-have-to-turn-count-and-if-on-like-we-have-to-do-with-delete/m-p/188094#M54192 alacercogitatus 2015-07-01T13:16:02Z Re: Do I have to turn count and if on like we have to do with delete? https://community.splunk.com/t5/Splunk-Search/Do-I-have-to-turn-count-and-if-on-like-we-have-to-do-with-delete/m-p/188095#M54193 <P>Sorry I did not know there was a search manual. </P> Wed, 01 Jul 2015 13:26:04 GMT https://community.splunk.com/t5/Splunk-Search/Do-I-have-to-turn-count-and-if-on-like-we-have-to-do-with-delete/m-p/188095#M54193 BITSIntern 2015-07-01T13:26:04Z