If there are events like these.
And I want to find Fieldnames which have "abc"
Event 1
File : abcdefg
URL : 1232323232.com
NUM : 1234567899
Name : James
Event 2
File : abcdefg
URL : 1232323232.abc
NUM : 1234567899
Name : James
File has "abc" 2 times and URL has "abc" 1 time.
I want result like this
FieldName | Count |
File | 2 |
URL | 1 |
How can I make this result by SPL?
| foreach *
[| eval <<FIELD>>=if(like(<<FIELD>>,"%abc%"),1,null())]
| stats sum(*) as *