How do I group similar values together?

[srizan]

source=*prod*
 | dedup SRV JAVAVER
 | stats count(SRV) by JAVAVER

This would generate report with all of the Java Versions.

I visualized using PieChart but I am only interested in seeing the chart with JAVAVER grouped as Java 18, Java 17 & Java19 instead of Java1801, Java1802, and so on.

Bascially, I want to group something like this only for the Pie Chart if possible:

JAVAVER=Java19* -> Java19
 JAVAVER=Java18* -> Java18
 JAVAVER=Java17* -> Java17

[anthonymelita · Accepted solution]

You can use the substring function before your stats statement.
| eval JAVAVER=substr(JAVAVER,0,6)