I have log events such as activity:http://xyz/rest/876
when I do stats count by activity I want to get results as:
How can it be best done?
| rex "(?<activity>http:\/\/[^\/]*\/rest)"
| stats count as mycount by activity
View solution in original post