Hello!
In any event i have two fields, something like:
User - Bob
Hobbies - Singing, Dancing, Eating
The "Hobbies" field is a multivalued field, and i want the output to be something like this:
User - Bob
Hobbies_Number - 3
Hobbies - Singing, Dancing, Eating
TL;DR - Is there an easy way to count how many values are in a multivalued field and show it?
Thanks in advance!
use the mvcount
eval function
... | eval Hobbies_Number = mvcount(Hobbies)
use the mvcount
eval function
... | eval Hobbies_Number = mvcount(Hobbies)