Splunk Search

Unique number of users

rashi83
Path Finder

Hi , I am running a query to get count of unique users like
| stats dc(user)

How do I get list of those unique users?

Tags (1)
0 Karma

gcusello
Legend

Hi @rashi83,
Try this:

your_search
| dedup user
| sort user
| table user

Ciao.
Giuseppe

0 Karma

whrg
Motivator

Try this:

| stats values(user)

You can combine it with the distinct count like this

| stats values(user) as users dc(user) as usercount

Alternatively:

| stats count by user
0 Karma
Get Updates on the Splunk Community!

Check out This Month’s Brand new Splunk Lantern Articles

Splunk Lantern is a customer success center providing advice from Splunk experts on valuable data insights, ...

Happy CX Day to our Community Superheroes!

Happy 10th Birthday CX Day!What is CX Day? It’s a global celebration recognizing innovation and success in the ...

Routing Data to Different Splunk Indexes in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...