SplunkPosted on 7th May 2025|1166 views
How can we obtain a total count and also count by the specific field shown in the same stats table?
Posted on 7th May 2025| views
We can obtain a count and also count by a specific field by using the following command:
Base search | top limit=0 count by myfield showperc=t | eventstatus sum(count) as totalcount