Hi,
Can you please try using the below, this will give you the count of that keyword appear in logs.
| rex field=_raw "(?i)\W(?PUSPLZ1MVPFP001.NAO.GLOBAL.GMACFS.COM)\W" | rename general_exception_type as Exception-Type| stats count by host, source,sourcetype, Exception-Type
Please try do let us know if that works.
... View more