https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-count-for-the-Top-5-and-Others/m-p/219919#M64629 <P>Awesome, Thank you</P> Fri, 26 Feb 2016 15:49:10 GMT fmpa_isaac 2016-02-26T15:49:10Z https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-count-for-the-Top-5-and-Others/m-p/219916#M64626 <P>Can anyone help me get the count for Top 5 plus an Others count for the following please? Thank you</P> <PRE><CODE>sourcetype="cisco:asa" action=blocked | stats count by src_ip, dest_ip, dest_port | sort - by count | rename src_ip as Src, dest_ip as Dest, dest_port as Port | addcoltotals </CODE></PRE> Fri, 26 Feb 2016 15:22:40 GMT https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-count-for-the-Top-5-and-Others/m-p/219916#M64626 fmpa_isaac 2016-02-26T15:22:40Z https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-count-for-the-Top-5-and-Others/m-p/219917#M64627 <P>Also, I want to keep a totals row at the bottom. So the top 5, then an others row plus a Totals row.</P> Fri, 26 Feb 2016 15:38:15 GMT https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-count-for-the-Top-5-and-Others/m-p/219917#M64627 fmpa_isaac 2016-02-26T15:38:15Z https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-count-for-the-Top-5-and-Others/m-p/219918#M64628 <P>Try this:</P> <PRE><CODE>sourcetype="cisco:asa" action=blocked | top 5 src_ip, dest_ip, dest_port useother=t | rename src_ip as Src, dest_ip as Dest, dest_port as Port | addcoltotals </CODE></PRE> Fri, 26 Feb 2016 15:43:31 GMT https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-count-for-the-Top-5-and-Others/m-p/219918#M64628 javiergn 2016-02-26T15:43:31Z https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-count-for-the-Top-5-and-Others/m-p/219919#M64629 <P>Awesome, Thank you</P> Fri, 26 Feb 2016 15:49:10 GMT https://community.splunk.com/t5/Splunk-Search/How-to-edit-my-search-to-get-the-count-for-the-Top-5-and-Others/m-p/219919#M64629 fmpa_isaac 2016-02-26T15:49:10Z