I have a field with multiple values, some of them share the same characters at the beginning of the values.
I need to find those with the same values and make it possible to choose how many characters I want to compare from the beginning of the value.
hi @ynag ,You can use substr function to get the first n characters. Below query get first 5 characters from myfield values.
| eval substr=substr(myfield, 0, 5)
| stats list(myfield), count by substr
If this reply helps you, an upvote/like would be appreciated.