How do I group similar values together?

srizan — Wed, 05 Dec 2018 22:35:54 GMT

source=*prod*
 | dedup SRV JAVAVER
 | stats count(SRV) by JAVAVER

This would generate report with all of the Java Versions.

I visualized using PieChart but I am only interested in seeing the chart with JAVAVER grouped as Java 18, Java 17 & Java19 instead of Java1801, Java1802, and so on.

Bascially, I want to group something like this only for the Pie Chart if possible:

JAVAVER=Java19* -> Java19
 JAVAVER=Java18* -> Java18
 JAVAVER=Java17* -> Java17

Re: How do I group similar values together?

anthonymelita — Wed, 05 Dec 2018 22:45:45 GMT

You can use the substring function before your stats statement.
| eval JAVAVER=substr(JAVAVER,0,6)

topic Re: How do I group similar values together? in Alerting

How do I group similar values together?

Re: How do I group similar values together?