DQL function replacing splunk command stats list

susmita_k — Thu, 31 Jul 2025 19:17:35 GMT

is there a DQL Command/function available which can replace the stats list command in splunk ? Thanks in advance

Re: DQL function replacing splunk command stats list

angelalanis — Fri, 01 Aug 2025 17:39:59 GMT

Hi, the stats command in Splunk is an aggregation command, in Dynatrace with DQL there are 3 aggregation commands.

Looking at this example in the Splunk documentation, I think something similar can be made using the summarize command with DQL.

I tried making this example in a Notebook, here are the results.

fetch logs | filter matchesPhrase(content, "long transaction") | parse content, """LD 'type ['LD:type']'""" | parse content, """LD 'duration ['INT:duration']'""" | summarize {count(), sum(duration), avg(duration), max(duration), min(duration)}, by:{type}

Let me know if you find this useful.

topic DQL function replacing splunk command stats list in DQL

DQL function replacing splunk command stats list

Re: DQL function replacing splunk command stats list