How to stats count email from each domain destination?

[chakuttha]

Hi All,

If i would like to stats count by destination email  and show result by sum each domain (gmail , hotmail )

please help to recommend

Best Regards,

CR

[gcusello]

Hi @chakuttha,

Yout question is just a little vague.

if you could share some sample of your logs I could help you better.

Anyway, you have to run something like this:

<your_search>
| rex "@(?<domain>[^ ]+)"
| stats count BY domain

I'm obviously not sure about regex because I didn't see your logs.

Ciao.

Giuseppe

[chakuttha]

@gcusello 
from log i will see destination email  

Example

example@gmail.com

example2@gmail.com

example3@gmail.com

example4@hotmail.com

from log above i would like result from stats query about

dest_email          count
gmail                         3

hotmail                    1

Thank you