https://community.splunk.com/t5/Splunk-Search/How-to-search-top-10-error-codes-in-an-environment/m-p/282660#M85353 <P>Assuming you have the err_cd field extracted, you just need to <CODE>top</CODE> command. Try something like this</P> <PRE><CODE>your base search here | top err_cd | fields - count </CODE></PRE> <P>This will give you top 10 err_cd, count and percent. The <CODE>fields - count</CODE> command will remove the <CODE>count</CODE> field from display.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.4.1/SearchReference/Top">http://docs.splunk.com/Documentation/Splunk/6.4.1/SearchReference/Top</A></P> Tue, 07 Jun 2016 11:49:22 GMT sundareshr 2016-06-07T11:49:22Z https://community.splunk.com/t5/Splunk-Search/How-to-search-top-10-error-codes-in-an-environment/m-p/282659#M85352 <P>Hi.</P> <P>I am new to Splunk and was looking for a search which can give me the list of the top 10 error codes occurring in an environment. Could anyone suggest on this?</P> <P>I think I have to use stats and top commands, but not sure on how to list top 10 error codes.</P> <P>Regards.</P> Tue, 07 Jun 2016 10:44:07 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-top-10-error-codes-in-an-environment/m-p/282659#M85352 ss78246 2016-06-07T10:44:07Z https://community.splunk.com/t5/Splunk-Search/How-to-search-top-10-error-codes-in-an-environment/m-p/282660#M85353 <P>Assuming you have the err_cd field extracted, you just need to <CODE>top</CODE> command. Try something like this</P> <PRE><CODE>your base search here | top err_cd | fields - count </CODE></PRE> <P>This will give you top 10 err_cd, count and percent. The <CODE>fields - count</CODE> command will remove the <CODE>count</CODE> field from display.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.4.1/SearchReference/Top">http://docs.splunk.com/Documentation/Splunk/6.4.1/SearchReference/Top</A></P> Tue, 07 Jun 2016 11:49:22 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-top-10-error-codes-in-an-environment/m-p/282660#M85353 sundareshr 2016-06-07T11:49:22Z https://community.splunk.com/t5/Splunk-Search/How-to-search-top-10-error-codes-in-an-environment/m-p/282661#M85354 <P>HI Sundaresh.</P> <P>Thanks for the update.<BR /> I am searching for error codes from log files in an environment.<BR /> How could I separate out only error code from the logs .<BR /> I mean error codes can be like err20 or err31 , just an example.</P> <P>And also could you suggest on how I can use error code as field in top command.</P> Wed, 08 Jun 2016 05:18:19 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-top-10-error-codes-in-an-environment/m-p/282661#M85354 ss78246 2016-06-08T05:18:19Z