Splunk
Common Queries
List Specific Values
<query> | stats values(<key>)
<query> | table <key>
<query> | stats count by <key>
Data for timechart
<query> | timechart span=1m count by <key>
List Specific Values
<query> | stats values(<key>)
<query> | table <key>
<query> | stats count by <key>
Data for timechart
<query> | timechart span=1m count by <key>