How to find the counting based on number of value...

Splunk Search

i used the following command
index=ABC
| stats values(L) AS USER

i need the output like below
user usercount
Ramesh 54
Somesh 12
Kamlesh 27

Try this!

index=ABC
| stats count AS usercount by L
| rename L as user

Get Updates on the Splunk Community!

Hey Splunk Community, we know you know Splunk. You likely leverage its unparalleled ability to ingest, index, ...

With .conf25 right around the corner in Boston, there’s a lot to look forward to — inspiring keynotes, ...

Although it might seem daunting, as we’ve seen in this series, manual instrumentation can be straightforward ...

How to find the counting based on number of values