Solved: how to get unique values in Splunk? - Splunk Community

#Random

This is a place to discuss all things outside of Splunk, its products, and its use cases.

I want to get unique values in the result.
Please provide the example other than stats

1 Solution

Solution

have you tried using dedup

http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/Dedup

View solution in original post

i need answers for this question apart from dedup and stats..everyone can answer freely.
all answers will be awarded..

Solution

have you tried using dedup

http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/Dedup

apart from dedup and stats

Try:

uniq Removes any search that is an exact duplicate with a previous result.

Refer this command doc:
http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/ListOfSearchCommands

Get Updates on the Splunk Community!

Vibe-coding, AI, and Splunkcraft: Highlights from the .conf26 Builder Bar

If you stopped by the Builder Bar at .conf26, thank you! This year, we brought ...

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...