Splunk Search

How do I extract value from stats list

apichai32356
Explorer

I want to extract count from list (picture 1 ) to table (picture 2) How do  I  do?

 

 

 

 |stats count by  Name,severity |sort - count | stats list(severity) as severity, list(count) as count, sum(count) as Total by Name 
| sort -Total

 

 

The field severity is follow by name the count for each level inside severity

apichai32356_0-1624565098885.png

apichai32356_1-1624565112484.png

 

Labels (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust
| chart count by Name,severity
| addtotals

View solution in original post

apichai32356
Explorer

Ok, now I know the error point thank you Mr.ITWhisperer .

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| chart count by Name,severity
| addtotals

apichai32356
Explorer

I have try, but the information are inaccurate 

apichai32356_0-1624567815751.png

 

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| stats count by Name,severity
| xyseries Name severity count
| addtotals
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...