Splunk Search

Count within count

sauravdhungel
Engager

 I have a data and created a table like this:

EligibilityCount
01-Country31

 

Now I would like to see how those country are counted to 31 . The output would be like this:

Countriescount
GERMANY4
MALAWI10
SERBIA6
SRI LANKA5
SWAZILAND1
UKRAINE5

 

Any help will be greatly appreciated. Thank you

Labels (1)

ITWhisperer
SplunkTrust
SplunkTrust

Without knowing what your data looks like, assuming you already have a field called countries in your events:

| stats count by countries
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...