# Analyse list for common domains **URL:** \ **Category:** Elasticsearch\ **Created:** [September 19, 2019, 5:47am UTC](https://discuss.elastic.co/t/analyse-list-for-common-domains/200116 "2019-09-19T05:47:51Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![pjanzen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pjanzen/32/13756_2.png) [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Post date:** [September 19, 2019, 5:47am UTC](https://discuss.elastic.co/t/analyse-list-for-common-domains/200116/1 "2019-09-19T05:47:51Z")
Hi all, I am parsing mail logs and from those events (amongst other fields) I extract the sender and recipient field. The receipient field hold n+1 email adres. Would it be possible to classify the majority of the same domain for the recipients? For example: Reciepents: [a@hotmail.com, [b@hotmail.com](mailto:b@hotmail.com), [c@hotmail.com](mailto:c@hotmail.com), [d@hotmail.com](mailto:d@hotmail.com)] = 100% hotmail Reciepents: [a@hotmail.com, [b@hotmail.com](mailto:b@hotmail.com), [c@hotmail.com](mailto:c@hotmail.com), [d@gmail.com](mailto:d@gmail.com)] = 75% hotmail, 25% gmail I say this in percentage but any weight form can work of course. The goal I have is to find out to which majority domain the mail is send too. I hope you can help. Paul. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 17, 2019, 5:47am UTC](https://discuss.elastic.co/t/analyse-list-for-common-domains/200116/2 "2019-10-17T05:47:54Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.