index=<<My_index>> earliest="12/23/2020:10:00:00" latest="12/23/2020:11:00:00" "<<url>>" | eval MyFeild=replace(MyFeild,"\d{1}\d+","") | search MyFeild=*sample_search* | stats count by MyFeild
When I have been using the above search criteria in UI , it gives the a table in Statistics tab with
MyFeild and its total Count
when I am using the splunkapi for some reason I am not getting the consolidated ouput
https://<<mydomain for my splunkapi>>/services/search/jobs/export?search=search index=<<My_index>> earliest="12/23/2020:10:00:00" latest="12/23/2020:11:00:00" "<<url>>" | eval MyFeild=replace(MyFeild,"\d{1}\d+","") | search MyFeild=*sample_search* | stats count by MyFeild
Not sure If I am missing anything here