is there a way to group eventtypes

[ruisantos]

I would like a list of all eventtypes associated to an IP on a single table. Is there a way to perform this?

I would like to have a list like.

ip=1.1.1.1 eventtype=google,maps,yahoo,amazon

[ziegfried · Accepted solution]

10.1.1.1 | typer | fields eventtype | mvexpand eventtype | dedup eventtype | table eventtype