×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
dinesh16
Engager
Member since: ‎02-02-2023
‎02-03-2023
Community Statistics
Posts 2
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎02-02-2023
View All

Re: Can't find the count of individual values in m...

by in Splunk Search
‎02-03-2023 09:12 AM
‎02-03-2023 09:12 AM
Thanks a lot @kamlesh_vaghela. It was very helpful and I successful evaluated the individual count of mv field. In my real scenario, I have two multi-value fields (like - Type). So, we cannot expand (mvexpand) the second multi-value field right that would collapse the result.  In this case, when we've two multi-value fields and we need to find the individual count of both multi-value fields. Do we have solution for this?. ... View more

Can't find the count of individual values in multi...

by in Splunk Search
‎02-02-2023 09:02 AM
‎02-02-2023 09:02 AM
Hello | index=fruits | transaction fruit_id | rex max_match=0 “using rex to get the Type” | eval TypeList=mvdedup(Type) | eval Typecount=mvcount(TypeList) | table fruit_id TypeList Typecount Type   Fruit_id TypeList Typecount Type 1 Apple Banana Orange 3 Apple Banana Orange Banana Orange Apple Orange Apple   Expected Output : Fruit_id TypeList Typecount Type 1 Apple Banana Orange 3 Apple - 3 Banana - 2 Orange - 3   I couldn't find the count of individual values in multi-value field. Can someone help me?. Thanks in advance. ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎02-03-2023 12:36 PM
Karma given to
View All