this is the most complete and elegant solution.  Thank you ... View more

Awesome...happy to have helped. ... View more

That shows the exact same number as the distinct user, perhaps what I am trying to show is the average user count of the total distinct users over time. For instance if I have 1500 distinct users over 7 days, show the average user count for that time ... View more

The first query worked like a charm. The second gave me an error "The arguments to the 'mvfilter' function are invalid." Thanks! I was WAY over thinking it ... View more

That works thanks!! ... View more

That search did give me the 3 columns, After playing with it some more and using some of your suggestions as a guideline this is what we came up with and it works perfectly sourcetype=mysearch myemail | top Name by Dst_Email_Domain limit=500 | stats list(Name), list(count), sum(count) by Dst_Email_Domain guess I was over thinking it earlier ... View more