Good Morning, Fellow Splunkers
I'm looking to list all events of an extracted field one time.
Example:
Extracted Field= [Direction]
However, I don't know all the possible outcomes, so I would like to list out all the values
North
West
South East
North East
East
Does anyone have an idea how I can generate this list for further reports?
Thank You,
base search | stats values(yourfield)
base search | stats count by yourfield | table yourfield
base search | stats values(yourfield)
base search | stats count by yourfield | table yourfield
Couple of options
base search | table fieldName | dedup fieldName
*OR*
base search | stats count by fieldName