I have a table which has fields defects and summary that gives me the summary of the defects. I want to extract some words from summary and their count as well. Please help.
Considering you are only checking the issue_type and summary fields and you know the values you are looking for (i.e. words like Bug, Reopened etc.), you can do it this way -
<your search> | eval details=issue_type.summary | rex max_match=0 field=details "(?<word>(?i)(Bug|Reopened|Closed))" | stats count by word
Considering you are only checking the issue_type and summary fields and you know the values you are looking for (i.e. words like Bug, Reopened etc.), you can do it this way -
<your search> | eval details=issue_type.summary | rex max_match=0 field=details "(?<word>(?i)(Bug|Reopened|Closed))" | stats count by word
Thanks Dinesh. It works fine . Modified the query a bit as i did not want it on issue_type field.Just summary would do it.
Great!! 🙂
Can you provide a sample of your data and the output you are expecting?
sure .
my table:
key issue_type summary
SPJ-171 Bug Reopened n for aaam
SPJ-18 Bug Reopened_m for AAAM
SPJ-19 Bug Bug 2
SPJ-19 Bug Reopened x for aaam
expected (eg):
word count
Reopned 3
Bug 5 etc.
The words are from the summary field. Hope I am clear 🙂