How to get the top 10 values of a column by another column?

[vrmandadi]

2015-09-02T14:01:02.228 Name=UPS6Z444706F2 Chkd_Out=Y DomID="Upstreamaccts\\racantr" Model="ProLiant WS460c Gen8 WS Blade" VideoAdapter="NVIDIA Quadro K3100M,HP Remote Graphics Driver" q_Action=reboot q_Status=SUCCESS q_DTRequest=1441219778.000 MenuID=43 RootName=RGFX Level1Name=Standard Type=Win7 Category=RGFX

Name = UPS6Z444706F2 
 host = UPSSQL15 
 source = dbmon-tail://WoRP/Worp_Reboot1 
 sourcetype = rgfx_Rebootstatus 

The above is one event of many. I want to know the top 10 Name by q_Action

[woodcock · Accepted solution]

Like this:

sourcetype = rgfx_Rebootstatus | top limit=10 Name BY q_Action

[vrmandadi]

thank You.