Below is my situation:
Output is to be like this 0-->a-->b-->c,d,e
How can i achieve this in splunk??
|stats values(childkey) by parentkey |rename values(childkey) as chld | mvexpand chld
View solution in original post
this is valid only when we have a parent and children, but in my case i have grand children as well...
in that case ,can you please provide a clearer description of the 'grandchildren' and a more exact requirement?
both @mayurr98 and my answers were based on what you posted in the question.
try this ?
| stats values(childkey) as childkey by parentkey