I would ideally like to aggregate all of these in one field "CreditCardNumber" so that I can then use:
host=stagexx | top CreditCardNumber
(Essentially, I want to display them in descending order of frequency)
Is there any way to do that? The rex command doesn't support this sort of OR use case (using | with quotes et al proved futile).
Instead, could I perhaps aggregate these into one field while trying to create a table? Something like assigning all of them to one type of sorts (such as CreditCardNumber) and then displaying all values in descending order of frequency?