topic Re: Get max version value based on another column in Dashboards & Visualizations

Get max version value based on another column

johnnykhoueiry — Thu, 13 Aug 2020 07:12:33 GMT

Hello,

how to get maxstats based on another col

Thank you!

Re: Get max version value based on another column

impurush — Sun, 09 Aug 2020 22:43:49 GMT

You can add the below line by replacing your comment(//Add something here)

|stats max(PercentagesPerVersion) by generation,version

this will give the results like.

generation

version

max(PercentagesPerVersion)

Re: Get max version value based on another column

to4kawa — Mon, 10 Aug 2020 01:19:03 GMT

index="my_index" sourcetype="version" | stats count(deviceId) as countDevicesPerVersion by version | eval PercentagesPerVersion=round((countDevicesPerVersion*100)/1152,2) | rex field=version "(?<generation>\w\d)" | table version, PercentagesPerVersion, generation | eventstats max(PercentagesPerVersion) as max_perc values(generation) as gen by generation | where gen=generation AND max_perc=PercentagesPerVersion | eval versionNumber=replace(version,"R", "") | sort - versionNumber | fields - versionNumber gen max_perc | table version PercentagesPerVersion

eventstats is useful.