Count field value occurences

[niuk]

I have search result like below with repeating values in 'src _ip' field

and looking to count occurrences of field values 

10.1.8.5          3

10.3.20.63     1

[gcusello · Accepted solution]

Hi @niuk,

try something like this:

your_search
| stats count BY src_ip
| sort -count

I hint to follow the Search Tutorial (https://docs.splunk.com/Documentation/Splunk/8.0.6/SearchTutorial/WelcometotheSearchTutorial)to learn how to impement searches.

Ciao.

Giuseppe