https://community.splunk.com/t5/Splunk-Search/How-to-know-the-host-occurrences-with-exception-message-from/m-p/204234#M59345 <P>Based on your table above I'm assuming this is what you are trying to do:</P> <PRE><CODE>yoursearch | stats count by host, message </CODE></PRE> <P>Let me know if that works for you. If not, could you post an example of your events?</P> <P>Thanks,<BR /> J</P> Fri, 01 Jan 2016 17:32:04 GMT javiergn 2016-01-01T17:32:04Z https://community.splunk.com/t5/Splunk-Search/How-to-know-the-host-occurrences-with-exception-message-from/m-p/204233#M59344 <P>I have server logs with different <CODE>host</CODE> names. Each of the <CODE>host</CODE> has its distinct <CODE>exception _message</CODE>. I want to show that into table how many times a specific <CODE>host</CODE> has occurred in the server log.</P> <P>example</P> <PRE><CODE>Host Host Count message ---------------------------------------------------------------------------------------- server1 45 server1_exception server2 6 server2_exception server3 4 server3_exception server4 20 server4_exception </CODE></PRE> Fri, 01 Jan 2016 14:30:13 GMT https://community.splunk.com/t5/Splunk-Search/How-to-know-the-host-occurrences-with-exception-message-from/m-p/204233#M59344 anirban_nag 2016-01-01T14:30:13Z https://community.splunk.com/t5/Splunk-Search/How-to-know-the-host-occurrences-with-exception-message-from/m-p/204234#M59345 <P>Based on your table above I'm assuming this is what you are trying to do:</P> <PRE><CODE>yoursearch | stats count by host, message </CODE></PRE> <P>Let me know if that works for you. If not, could you post an example of your events?</P> <P>Thanks,<BR /> J</P> Fri, 01 Jan 2016 17:32:04 GMT https://community.splunk.com/t5/Splunk-Search/How-to-know-the-host-occurrences-with-exception-message-from/m-p/204234#M59345 javiergn 2016-01-01T17:32:04Z