Archive

count number of users in the app

Explorer

Hi,
I am trying to show the uniq users list but getting diffrent results

for example I have this list of data
USER_ID

1111111

2222222

2222222

3333333

4444444

4444444

Why are there diffrent number of results when doing:

  1. ...|table id|uniq

  2. ...|table id|stats dc(id)

Tags (3)
0 Karma

Communicator
| dedup id

will filter only ("real") unique IDs - as counted by :

| stats dc(id)
0 Karma

Revered Legend
For sample data is like below
1
1
2
3
2
3
3
4

uniq
Filters out repeated adjacent results. 
OUTPUT:
1
2
3
2
3
4

stats dc(id) :- counts no of unique values for field id
OUTPUT: 4
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!