How to combine data based on a common field?

[anooshac]

Hi all, i have some data task name, execution date, link uploaded earlier. Now i want to add some more data related to the task name they are component name, number of components. If i upload the 2nd data in the form task name , component name, number of components will i be able to get all data together based on one common field task name. Can anyone knows is there any solution for this?

My data are task name, execution date, link and the next set of data  is task name , component name, number of components.

[ITWhisperer]

Yes, you can either use join or stats by task name to aggregate the values from the fields on a common take name.

[anooshac]

I don't want to just display the data directly using stats. My raw data has alot of processing to do and using join i am joining all these processed results. Is there any solution other than this?

[ITWhisperer]

Stats, just like any command, works on the events in the pipeline; you can choose where you put the stats command; you can have more than one stats command if that helps your use case.

[anooshac]

when i use stats all the data including the data i don't want to display also shows. How to avoid these? I tried by putting table command after stats for the selected data but that doesn't work.

[ITWhisperer]

The table command can be used to limit the fields/columns - the where command can be used to limit the event/rows

[anooshac]

Okay. Thank you so much.