Getting Data In

How to get the count for this JSON value pair

muthu3006
New Member

I want to get the count for the key value pair and make it in a table. Could anyone please help me on this.

My sample data looks like below:
I want to take the count of Name alone.

School {Name : "abc", Number: "123",Age:"" }

Tags (2)
0 Karma

poete
Builder

Hello @muthu3006,
I am not quite sure I understood what you seek, but here is a sample of request that will let you elaborate on your particular case.

|makeresults|eval _raw="{\"School\":[{\"Name\" : \"abc\", \"Number\": 123,\"Age\":\"\"},{\"Name\" : \"def\", \"Number\": 456,\"Age\":\"\"},{\"Name\" : \"ghi\", \"Number\": 789,\"Age\":\"\"}]}"|spath |rename School{}.Name as names|eval nb=mvcount(names)
0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...