Is it possible to combine multiple rows into one row ?
to something like
Mvcombine combined all the rows to one row but they are not comma separated.
|mvcombine delim="," COLUMN
Try like this
your current search giving field COLUMN
| stats list(COLUMN) as COLUMN delim="," | nomv COLUMN
View solution in original post
|mvcombine delim="," COLUMN| eval MYROW=mvjoin(COLUMN, ", ")
| eval COLUMN = frow1.", ".".frow2.", ".frow3
Using eval and a '.' is one way.
| strcat frow1 ", " frow2 ", " frow3 COLUMN
Using stringcat is another.