Splunk Search

Count within count

sauravdhungel
Engager

 I have a data and created a table like this:

EligibilityCount
01-Country31

 

Now I would like to see how those country are counted to 31 . The output would be like this:

Countriescount
GERMANY4
MALAWI10
SERBIA6
SRI LANKA5
SWAZILAND1
UKRAINE5

 

Any help will be greatly appreciated. Thank you

Labels (1)

ITWhisperer
SplunkTrust
SplunkTrust

Without knowing what your data looks like, assuming you already have a field called countries in your events:

| stats count by countries
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...