How to calculate the number of times a value appear in a multi value field?

[architkhanna]

Hi All,

Is there a way we can calculate the number of times a value appear in a multi value field into a separate field?

TIA

[acharlieh]

Hand jamming on my phone from the docs, Assuming a known static value that’s being compared against: 

    ... | eval count=mvcount(mvfilter(mvfieldname="staticvalue"))

Assuming Splunk 8 and the comparison is against different single value field in each row...

    ... | eval mvresults=mvmap(mvfieldname,if(mvfieldname=svfieldname,"Y","N")), count=mvcount(mvfilter(mvresults="Y"))

see: https://docs.splunk.com/Documentation/Splunk/8.0.5/SearchReference/MultivalueEvalFunctions