I have this search
| eval max = round(max, 2)
| eval avg = round(avg, 2)
| eval median = round(median,2)
| eval min = round(min, 2)
but I want to condense this search to just 1 line.
Can I do this?
You can club it in your aggregation function itself.
index=*|stats count as number by sourcetype
|chart eval(round(avg(number),2)) as avg,eval(round(max(number),2)) as max,eval(round(min(number),2)) as min
thank you for your answer.
And I found "foreach".