Hi , I am trying to run a splunk query and i am able to generate the required filed . however i am facing difficulties in replicating the same using stats under statistics table For example , Under selected filed , I was able to retrieve the required fields , lets say User, host, IP, LP and session When i use the below command stats values(User) AS user , values(host) AS host, values(LP) AS LP, values(IP) AS IP BY session Session is common and appears for all. But i am able to see only host , session , LP values under statistics but user and IP values are not being displayed although they are available under the selected field. ( when you look into events tab) Any help would be appreciated !!
... View more