Reporting
Highlighted

Combined Pivots

Explorer

Guys and girls,

once again I need your help 🙂

I am trying to run a query from a "flattened" set of events (KV Store) (pic1) and collect the result, a pivot-like resultset, with the grand total as a field (pic2) into an index.

alt text

alt text

I am struggling to get it done. I have a couple of questions:

1 - Is there any chance I can get the results displayed as JSON (inc. arrays)?
2 - I am not sure pic2 is the result of a count with many "by" criteria, but more like 3 values(xxx) and 4 count(xxx) collated. How can I achieve this?

Thanks.

0 Karma