Hi @AL3Z,
sorry but I don't understand: do you want the first or the second?
anyway, for the first, you need something like this:
<your_search>
| stats values(action) AS action BY host
in the second you have
<your_search>
| stats count BY host action
| fields - count
if you also want the count it's a little more complicated:
<your_search>
| stats count BY host action
| eval column=action."|".count
| stats values(column) AS column BY host
Ciao.
Giuseppe