Splunk Search

Count the number of field

aatik5u
Path Finder

Hello,

So I have to count the number of resulted fields, it doesn't go far than this. for my search I have index=example sourcetype=example source=example, and the goal is to know how many fields are extracted from the results of this search.

 

Can anyone help please 😄 ?

Labels (4)
Tags (1)
0 Karma
1 Solution

Temuulen0303
Explorer

you can use fieldsummary command:

   index=example sourcetype=example | fieldsummary

And count fields using:

   index=example sourcetype=example | fieldsummary | table field | stats count

more about fieldsummary here:
fieldsummary - Splunk Documentation

View solution in original post

0 Karma

Temuulen0303
Explorer

you can use fieldsummary command:

   index=example sourcetype=example | fieldsummary

And count fields using:

   index=example sourcetype=example | fieldsummary | table field | stats count

more about fieldsummary here:
fieldsummary - Splunk Documentation

0 Karma

aatik5u
Path Finder

Thank you very much it's really helpful

Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...