Splunk Search

How to add a word after a count?

jip31
Motivator

Hello

I use the search below and I would like to do 2 different things
1) How to do for adding a word after the stats count (for example I would like to have "250 machines")
2) How to do for adding a word with condition after the stats count (for example I would like to have "250 machines" if number of host is >0 and "any machines" if host=0 )

| inputlookup host.csv 
| stats count by host

Thanks

Tags (2)
0 Karma
1 Solution

chrisyounger
SplunkTrust
SplunkTrust

Try this:

| inputlookup host.csv 
| stats count by host
| eval count = if(count == 0, "any machines", tostring(count) + " machines")

View solution in original post

KailA
Contributor

You can try that

| inputlookup host.csv 
| stats count by host
| eval count = if(count > 0, count." machines","Any machines")

Let me know 🙂

0 Karma

vnravikumar
Champion

Hi

try like

|stats count by host | eval count = if(count >0, count." "."machines", "any machines")
0 Karma

chrisyounger
SplunkTrust
SplunkTrust

Try this:

| inputlookup host.csv 
| stats count by host
| eval count = if(count == 0, "any machines", tostring(count) + " machines")

jip31
Motivator

Thanks!!!!

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...