eventstats - Splunk Documentation
DescriptionGenerates summary statistics from fields in your events and saves those statistics in a new field. Only those events that have fields pertinent to the aggregation are used in generating the summary statistics. The generated summary statistics can be used for calculations in subsequent commands in your search. See Usage.SyntaxThe required syntax is in bold.eventstats[allnum=] ...[]Required argumentsSyntax: ( | ) [AS ]Description: A statistical aggregation function. See Stats function options. Читать дальше...