i have multiple Application names and the requirement is that for each application i need to find Top 3 values (which mean I need the top 3 greatest number for that application and NOT the no. of occurences)
something like this;
Say my input is like
Application Value
A 9
A 8
A 1
A 7
A 7
A 6
B 11
B 9
B 7
B 5
B 4
B 4
C 18
C 17
C 17
C 11
C 9
C 15
and I want the oUTPUT to be like this :
Application Value
A 9
A 8
A 7
B 11
B 9
B 7
C 18
C 17
C 15
Please let me know how to proceed with this. I tried with the top and head command which were not giving the expected result.
try something like:
...|sort 0 Application - Value|streamstats count by Application|search count<=3|fields - count