About sati80

sati80 · ‎06-24-2013

I want to get all locations with one query the result should be like this PHX:20 SFO:10 SLC:20 THF:100 TKO:10

sati80 · ‎06-24-2013

if I query index="access" earliest=-20m latest=now | table READER_NAME It returns PHX DC STRWL SEOL VENDOR OFF 1 KUL.26 OFFICE NTH SEOL.37 S ELEV LOBBY ENT TPZ DC 1.1 LOBBY MANTRAP EXIT 1 PHX DC 2.2 S OFFICE ENT TPZ DC 1.1 LOBBY MANTRAP EXIT 1 SEOL.19 NORTH LOBBY ENT SEOL.36 N ELEV LOBBY ENT and I want to get count on each location if I try this query index="access" earliest=-20m latest=now | stats count(READER_NAME) it only returns count number Thank you,

sati80 · ‎06-24-2013

I have a table called READER_NAME this table has all info of reader I want to query with location(PHX,SFO,SLC,THF.TKO) and get result like this PHX:20 SFO:10 SLC:20 THF:100 TKO:10 if I do this query index="access" SFO earliest=-20m latest=now | stats count(READER_NAME) I only get result on SFO(SFO:10) Any solution that I can get multiple counts with one query Thank you in advance

Posts	3
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎06-24-2013

Online Status	Offline
Date Last Visited	‎02-03-2025 02:17 AM

multiple counts in one table

Re: multiple counts in one table

Re: multiple counts in one table

multiple counts in one table

Are you a member of the Splunk Community?

multiple counts in one table

Re: multiple counts in one table

Re: multiple counts in one table

multiple counts in one table