- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
enb_splunk
Engager
10-24-2024
08:40 AM
Hello Everyone,
Having a hard time finding the appropriate way to display data. I have duplicate data where one field is unique. I would like to dedup but leaving one instance of the unique value.
Example of what I want to dedup:
field1 | field2 | field3 | field4 |
a | b | c | d |
a | b | c | e |
a | b | c | f |
Example of what I would like to see:
field1 | field2 | field3 | field4 |
a | b | c | d |
Any help would be greatly appreciated.
Regards.
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer

SplunkTrust
10-24-2024
09:07 AM
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer

SplunkTrust
10-24-2024
09:07 AM
| dedup field1 field2 field3
