I need to sum of distinct count(emal_id) if event_name=email and distinct_count(person_id) if event_name=push. And sum of these distinct count need to be in one field.
Any help would be highly appreciated.
| eval dc_email_id=if(event_name=="email",somefield1,0)
| eval dc_persion_id=if(event_name="push",somefield2,0)
| stats dc(dc_email_id) as emailID,dc(dc_person_id) as personID by event_name| eval somefield_name = emailID + personID