Splunk Search

How to get top 10 stats with pivot command without using sort?

Contributor

Hi all,

How can I get a top 10 statistic with pivot? Currently I'm doing something like

| pivot MyModel MyObject count(MyObject) AS count SPLITROW myseries | sort 10 - count 

I'd like to avoid the sort somehow.

Thanks,
Simon

Tags (2)

Communicator

Hi Simon,

Try this search:

| pivot MyModel MyObject count(MyObject) AS count SPLITROW myseries | sort - count | head 10

tks!

Communicator

I downvoted this post because doesn't answer the question at all.

0 Karma

Contributor

This is the same as my search does.
I asked if there's a way to get the top10 statistics directly with the pivot command.

0 Karma

Contributor

@simon what in the world are you trying to get at? Both solution seems to work when handling pivot

0 Karma