Splunk Search

how to identify unique user entry

dilstn
Explorer

Log 11:34:23 http://www.rohm.com , customername="Hamilton",uuid="245209820udwdef34", customer id 5

Log 11:37:39 http://www.rohm.com , customername="John",uuid="4878742345dsdef34", customer id 23

Log 11:39:45 http://www.rohm.com , customername="Pearson",uuid="4398723isdjdwef34", customer id 84

Log 11:42:58 http://www.rohm.com , customername="John",uuid="4878742345dsdef34", customer id 23

Log 11:47:43 http://www.rohm.com , customername="Hamilton",uuid="245209820udwdef34", customer id 5

Here i need to identify (unique) user entry like Hamilton , John , Pearson
So the answer should be like this total unique user is 3

Tags (1)
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

stats dc(customername)?

Get Updates on the Splunk Community!

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...