how to split the data in Splunk?

[logloganathan]

Please provide some example to split the data in splunk
it just example to learn.
answer to these question will be awarded

[skoelpin · Accepted solution]

What exactly do you mean split the data?

Are you referring to breaking the events or splitting something by an entity in the statistics view?

If the latter, you would simply add a by clause like this

index=... sourcetype=...
| stats count by host

[logloganathan]

split the data