Splunk Search

count the specific items from the list in Splunk

Shashank_87
Explorer

Hi, I have a list column with different values and i want to count the number of occurence of a specific value. For example I have a column temp which contain list of values like below -

temp
/review-basket
/review-basket
/review-basket
/check-your-details

Now what i want another column with a count of the occurence of /review-basket which in the above case is 3.

Any help is appreciated.

0 Karma

apoorvaarbooj
Engager

... | stats count by temp

0 Karma

vnravikumar
Champion

Hi

Try with

.....|eventstats count by temp
0 Karma

Shashank_87
Explorer

@vnravikumar I think you misunderstood. The temp column I am getting by using stats like below -

| stats min(_time) as _time, list(req_content) as temp, count(req_content) as total by uniqueId

Now, that temp column has details like above I mentioned in the question. I need another column with the count of /review-basket in the temp column.

0 Karma

rmmiller
Contributor

@Shashank_87, is your expected output is supposed to look like this?

temp count
/review-basket 3
/review-basket 3
/review-basket 3
/check-your-details 1

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...