splitting data and saving the each result

[changwoo]

i have raw data like

1. cat | dog | ele

2. cat | dog

3. dog | ele

this field name is catego
result should be counting like this => cat = 2, dog =3, ele =2

sourcetype=movie | eval n= split(genre,"|") |table count(n) by n < = this is not splitting the string

[Ayn · Accepted solution]

OK, some issues here.

For one, the field name is catego, but in your search you use "genre"?
And then, table is no statistical command. It only shows the fields you supply as arguments. count(n) is no field, neither is "by".

Maybe you want something like this:

sourcetype=movie | eval n=split(catego,"|") | stats count by n

[changwoo]

oh ... my mistake!

the table name is genre 🙂

thanks!