distinct results

[jmunsterman]

distinct results in splunk and how to show all data in selected fields vs the 100+ results

[kiran_panchavat · Accepted solution]

@jmunsterman  As mentioned @richgalloway  , you can use the stats command to retrieve all the results. Please find the attached screenshot for reference.

I hope this helps, if any reply helps you, you could add your upvote/karma points to that reply, thanks.

[richgalloway]

One way to see all 100+ values of the field is by using the stats command.

... | stats count by dnis

 Of course, the table command also will list all values of the field (with duplicates, if any).

... | table dnis