histogram on search queries

[atevs]

Hi,

I am a new user to splunk.

Our splunk data consists of lines like:

engine id= error1

engine id= error3

engine id= error2

engine id= error3

I would like to be able to get histogram of how many errors of each types where found, without mention errors implicitly and ignoring id field.

(error1:1, error3:2, error2:1 in this case)

How can I do it ?

Thanks a lot,
Svetlana

[martin_mueller]

Assuming you have the error type extracted in a field called error_type, you can do this:

your base search | stats count by error_type