#Random
This is a place to discuss all things outside of Splunk, its products, and its use cases.

how to split the data in Splunk?

logloganathan
Motivator

Please provide some example to split the data in splunk
it just example to learn.
answer to these question will be awarded

Tags (1)
0 Karma
1 Solution

skoelpin
SplunkTrust
SplunkTrust

What exactly do you mean split the data?

Are you referring to breaking the events or splitting something by an entity in the statistics view?

If the latter, you would simply add a by clause like this

index=... sourcetype=...
| stats count by host

View solution in original post

skoelpin
SplunkTrust
SplunkTrust

What exactly do you mean split the data?

Are you referring to breaking the events or splitting something by an entity in the statistics view?

If the latter, you would simply add a by clause like this

index=... sourcetype=...
| stats count by host

logloganathan
Motivator

split the data

Get Updates on the Splunk Community!

Developer Spotlight with Brett Adams

In our third Spotlight feature, we're excited to shine a light on Brett—a Splunk consultant, innovative ...

Index This | What can you do to make 55,555 equal 500?

April 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...