topic Re: Creating table by same unique id in Dashboards & Visualizations

Creating table by same unique id

abdulvehhaba — Sat, 04 Nov 2017 23:24:53 GMT

I have data like this

I want to dedup (group) uuid and create a price table in same row

Re: Creating table by same unique id

acharlieh — Sun, 05 Nov 2017 04:16:01 GMT

Depending on what exactly you are expecting, there are at least a couple of different ways you could accomplish this:

<base search> | stats list(price) as price list(market) as market by uuid

This one uses Multivalue functions to give you the pairs of price and market

<base search> | chart limit=0 latest(price) over uuid by market

This one would have a row per uuid, with the price for each market in different columns by using the chart function.

I used the following as a base search to simulate your data:

| makeresults count=6 | streamstats count | eval uuid=if(count<=3,"A","B"), market=case(count%3=1,"MarketA",count%3=2,"MarketB",1=1,"MarketC"), price=random()

Re: Creating table by same unique id

abdulvehhaba — Sun, 05 Nov 2017 13:26:06 GMT

| chart limit=0 latest(price) over uuid by market

solve my problem thx, but it show only uuid and price i cannot see date, time etc