How to chart values only where 2 or more values are returned?

[ulikabbq]

I am using a chart function as follows:

| chart count, values(status) by user

and I only want to get back the results that have 2 or more statuses. I have tried some eval commands but I haven't gotten anything to work properly.

[aweitzman · Accepted solution]

Try this:

| chart count, values(status) as allStatuses by user | where mvcount(allStatuses) > 1

[yannK]

you can use the distinct count too

| chart count, values(status) as allStatuses, dc(status) AS distinct_statuses by user | where distinct_statuses > 1 | fields - distinct_statuses