I'm looking at the Web datamodel and try to determine which fields are populated.
I can do :
| tstats dc(sourcetype) FROM datamodel=Web by sourcetype
| tstats count(sourcetype) or
FROM datamodel=Web by sourcetype
| tstats count(Web.status) FROM datamodel=Web by Web.status
but I like to see a breakdown of all the fields in this datamodel.
Is it possible?
I guess I'm not sure what you mean by "breakdown." The doc lists the field names, data type, description, and example values. Can you clarify your question, to help the community answer better?
Sure, I would like to see which fields are populated with which values across all the fields which are available in this datamodel, without examining each field individually. I hope it's clear.