https://community.splunk.com/t5/Splunk-Search/Search-for-number-of-calls-by-particular-callers/m-p/263586#M79118 <P>Does the search <CODE>callerId</CODE> return the events you need?<BR /> Do the events already have the <CODE>callerId</CODE> field extracted?</P> <P>You'll need a yes to both in order to get results.</P> Tue, 29 Mar 2016 19:28:52 GMT martin_mueller 2016-03-29T19:28:52Z https://community.splunk.com/t5/Splunk-Search/Search-for-number-of-calls-by-particular-callers/m-p/263584#M79116 <P>Whenever someone calls my rest service, the event gets logged into the logs like so:</P> <PRE><CODE>callerId:1324 </CODE></PRE> <P>How do I create a panel on my dashboard that calculates the total number of calls made and breaks it down by number of times called by particular id's. So in plain english it would give the following information: "Your app was called 10 times today, 5 times by 1324, 3 times by 3948, and 2 times by 1902.</P> Tue, 29 Mar 2016 14:56:50 GMT https://community.splunk.com/t5/Splunk-Search/Search-for-number-of-calls-by-particular-callers/m-p/263584#M79116 sankarms 2016-03-29T14:56:50Z https://community.splunk.com/t5/Splunk-Search/Search-for-number-of-calls-by-particular-callers/m-p/263585#M79117 <P>Something like this?</P> <PRE><CODE>search for your events | top 0 callerId | appendpipe [stats sum(*) as *] | sort 0 - count </CODE></PRE> Tue, 29 Mar 2016 16:32:28 GMT https://community.splunk.com/t5/Splunk-Search/Search-for-number-of-calls-by-particular-callers/m-p/263585#M79117 martin_mueller 2016-03-29T16:32:28Z https://community.splunk.com/t5/Splunk-Search/Search-for-number-of-calls-by-particular-callers/m-p/263586#M79118 <P>Does the search <CODE>callerId</CODE> return the events you need?<BR /> Do the events already have the <CODE>callerId</CODE> field extracted?</P> <P>You'll need a yes to both in order to get results.</P> Tue, 29 Mar 2016 19:28:52 GMT https://community.splunk.com/t5/Splunk-Search/Search-for-number-of-calls-by-particular-callers/m-p/263586#M79118 martin_mueller 2016-03-29T19:28:52Z