How to count the number of occurence of string in Splunk

Question

I am not able to find a Splunk query to count the number of occurences of a string across events.

My string is:

"\"IsFeedback\":true"

I tried this but it doesn't count the number of occurrences of the string across events:

host="HOST001" AND "\"IsFeedback\":true"

I want the occurrence of "\"IsFeedback\":true" across all events.

@reginold : it returns me the same result as it does with out STATS COUNTS. I want to get the count of the string across all events, like a string count. In one event i have multiple count of the same string. — Bhaskar Mishra, Nov 23 '17 at 15:53

score -1 · Answer 1 · edited Nov 24 '17 at 12:27

-1

Try this:

index=xxxx sourcetype=xxxx host="HOST001" "\"IsFeedback\":true" | stats count

edited Nov 24 '17 at 12:27

freginold

answered Nov 21 '17 at 17:58

skoelpin

1 Answers1