Alerting

4 students are attempting for exams multiple times , need to extract only failed student details, can any one help

sunil04mca
Explorer

Student_name    Status   marks

john                               fail        30

han                               fail        10

ram                               fail        20

vish                               Pass        50

han                               Pass        90

ram                               Pass        50

 

 

The output should be -  as ram as passed in second attempt

Student_name    Status   marks

john                               fail        30

han                               fail        10

Labels (1)
Tags (1)
0 Karma
1 Solution

Nisha18789
Builder

hi @sunil04mca , you can use this after your main query

....| stats latest(status) as status by user | search status="fail"

View solution in original post

Nisha18789
Builder

hi @sunil04mca , you can use this after your main query

....| stats latest(status) as status by user | search status="fail"

View solution in original post

sunil04mca
Explorer

@Nisha18789  This query will work for above table , but when i am trying to combine and  extract from 2 tables , i am not getting.
table-1 student name , marks and status, 
table-2 we have student details. should extract address and DOB.
Need a report as student-name, status,address and DOB.

Can u pls help on this

0 Karma

sunil04mca
Explorer

Thanks @Nisha18789 , this is working as expected..

0 Karma

iamkilarunaresh
Explorer

use stats latest(status) as status | search status=fail

Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!