Reporting

Qwery related to table and field

sagar12
New Member

Hello all,

 

Can someone Please help me, regarding my qwery, 

"base | stats count by field 1"

I am using this qwery but i would like to add field2 also in this qwery as form of table, Please

provide your valuable suggestions

 

 

 

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

It's a bit vague what you're trying to do. You can't get two separate result sets from one search.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

It is not clear what your events look like, but you could try something like this

| stats count by field1, field2
0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...