How to get count of c-ip from IIS logs indexed by splunk

[ajaykulkarni]

Hi All,

I am using Microsoft's Log Parser tool with which I can query my IIS logs.
Now I have a query to select different client ips and the count like,

select c-ip, count(c-ip)
FROM
File Name
group by c-ip

Same thing I need to try with splunk search, but I can't. 😞

Please help.

[Ayn · Accepted solution]

Do you have the c_ip field or similar extracted in Splunk? Where are you encountering problems?

[ajaykulkarni]

I am extremely sorry, its my mistake.
In IIS logs we have c-ip and splunk has provided c_ip.
Solved the problem.
Thanks @Ayn.