# Dedup in Kibana search
**URL:** https://discuss.elastic.co/t/dedup-in-kibana-search/138041
**Category:** Elasticsearch
**Created:** [June 29, 2018, 10:25pm UTC](https://discuss.elastic.co/t/dedup-in-kibana-search/138041 "2018-06-29T22:25:08Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@Rohit\_Jawle](https://discuss.elastic.co/u/Rohit_Jawle)
#### Post date: [June 29, 2018, 10:25pm UTC](https://discuss.elastic.co/t/dedup-in-kibana-search/138041/1 "2018-06-29T22:25:08Z")
In splunk, there is a command called dedup, followed by a field name. How do you do this in elk?
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 30, 2018, 7:22am UTC](https://discuss.elastic.co/t/dedup-in-kibana-search/138041/2 "2018-06-30T07:22:06Z")
What are you trying to do?
---
### Author:  [@Rohit\_Jawle](https://discuss.elastic.co/u/Rohit_Jawle)
#### Post date: [July 5, 2018, 6:48pm UTC](https://discuss.elastic.co/t/dedup-in-kibana-search/138041/3 "2018-07-05T18:48:14Z")
I'm trying to get it so that for every value in a field (for example, for every individual ip address), it only shows the first result.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [July 5, 2018, 8:00pm UTC](https://discuss.elastic.co/t/dedup-in-kibana-search/138041/4 "2018-07-05T20:00:14Z")
Then look at doing an aggregation of some sort on the IP field.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 2, 2018, 8:00pm UTC](https://discuss.elastic.co/t/dedup-in-kibana-search/138041/5 "2018-08-02T20:00:20Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.