How to create a table to display different users who logged in from same clientip?

[Win]

Hi, I am a student and new to Splunk. I really need help creating a table like this:

The goal is to detect different users that authenticated using same clientIP, different httpmethod, different status codes, and its equivalent sessionid. I used the below query, which yielded no results.

index=* sourcetype=* httpmethod=* httpstatus=*
| table clientip,httpmethod,statuscode,sessionid
| eval mv_field = clientip.”,”.httpmethod”,”.statuscode”,”.sessionid
| makemv delim=”,” mv_field
| table mv_field

clientIP	HTTPMETHOD	STATUS CODE	SESSION
clientIP 1	GET POST HEAD	200s 400s 300s 500s	sessionid
clientIP 2	POST	400s 200s	sessionid
clientIP 3	GET POST	200S	sessionid

[Win]

@johnhuang . Thank you. This worked perfectly as I wanted

[johnhuang · Accepted solution]

Based on the example output you provided:

index=* sourcetype=* httpmethod=* httpstatus=*
| stats values(*) AS * BY clientip
| table clientip,httpmethod,statuscode,sessionid