Reporting

Qwery related to table and field

sagar12
New Member

Hello all,

 

Can someone Please help me, regarding my qwery, 

"base | stats count by field 1"

I am using this qwery but i would like to add field2 also in this qwery as form of table, Please

provide your valuable suggestions

 

 

 

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

It's a bit vague what you're trying to do. You can't get two separate result sets from one search.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

It is not clear what your events look like, but you could try something like this

| stats count by field1, field2
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...