column not appearing is results

[acosgrove1991]

Hello, I am new to splunk and having an issue with the following command:

SendersMNO="*" NOT ("VZ", "0", "Undefined") | where SenderType= "Standard"| stats count as Complaints by SendersAddress | sort 10 -Complaints | table SendersAddress, SendersMNO, Complaints

The command work; however, the result column for SendersMNO is not producing any results, any reason why? All help is appreciated.

[ITWhisperer · Accepted solution]

stats count as Complaints by SendersAddress will give you just two fields per event, the count (Complaints) and SendersAddress. SendersMNO is not passed through the stats command. If you want this beyond the stats command, you either have to add it to the by clause or use values() or list() in the stats command to include the values of this field.