Try like this
your current search giving field COLUMN
| stats list(COLUMN) as COLUMN delim="," | nomv COLUMN
|mvcombine delim="," COLUMN| eval MYROW=mvjoin(COLUMN, ", ")
Try like this
your current search giving field COLUMN
| stats list(COLUMN) as COLUMN delim="," | nomv COLUMN
Hi,
I have a similar problem. I want to assign all the values to a token.
<condition label="All">
<set token="Tok_all">"All the values should be should be assigned here"</set>
</condition>
also the values should be delimited with double quotes. (eg: "a","b","c")I tried a lot and i am not able to reach to the solution. do you have any solution for this?