Splunk Enterprise

The sum of users per VLAN

Redha
Explorer

Hi,

I am looking to have the sum of users per vlan, for example vlan=xxx is used by username=A, B, C so I would have a table with VLAN = xxx and sum of users = 3,

Thx

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Have you tried the stats command?

...
| stats distinct_count(username) as users by VLAN
...

 

---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Have you tried the stats command?

...
| stats distinct_count(username) as users by VLAN
...

 

---
If this reply helps you, Karma would be appreciated.
0 Karma

Redha
Explorer

Thank you richgalloway  ! it's works 

Get Updates on the Splunk Community!

Improve Data Pipelines Using Splunk Data Management

  Register Now   This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

Register Join this Tech Talk to learn how unique features like Service Centric Views, Tag Spotlight, and ...

Thank You for Celebrating CX Day with Splunk!

Yesterday the entire team at Splunk + Cisco joined the global celebration of CX Day - celebrating our ...