Given the below scenario:
base search| table service_name,status,count
Service_name |
Status |
Count |
serviceA |
500_INTERNAL _ERROR |
10 |
serviceA |
404_NOT_FOUND |
4 |
serviceB |
404_NOT_FOUND |
1 |
serviceC |
500_INTERNAL_ERROR |
2 |
ServiceC |
404_NOT_FOUND |
5 |
serviceD |
206_PARTIAL_ERROR |
1 |
How can I display the results with group by service_name and the result as below table:
Service_name |
Status |
Count |
serviceA |
500_INTERNAL _ERROR, 404_NOT_FOUND |
14 |
serviceB |
404_NOT_FOUND |
1 |
serviceC |
500_INTERNAL_ERROR, 404_NOT_FOUND |
7 |
serviceD |
206_PARTIAL_ERROR |
1 |
Hi @spl_1991,
please try this:
base search
| stats values(status) AS status sum(count) AS count BY service_name
Ciao.
Giuseppe
Hi @spl_1991,
please try this:
base search
| stats values(status) AS status sum(count) AS count BY service_name
Ciao.
Giuseppe
Hi @gcusello ,
Thanks a lot and it worked....grazie!!