How to group by and concat column values?

[spl_1991]

Given the below scenario:

base search| table service_name,status,count

Service_name	Status	Count
serviceA	500_INTERNAL _ERROR	10
serviceA	404_NOT_FOUND	4
serviceB	404_NOT_FOUND	1
serviceC	500_INTERNAL_ERROR	2
ServiceC	404_NOT_FOUND	5
serviceD	206_PARTIAL_ERROR	1

How can I display the results with group by service_name and the result as below table:

Service_name	Status	Count
serviceA	500_INTERNAL _ERROR, 404_NOT_FOUND	14
serviceB	404_NOT_FOUND	1
serviceC	500_INTERNAL_ERROR, 404_NOT_FOUND	7
serviceD	206_PARTIAL_ERROR	1

[gcusello · Accepted solution]

Hi @spl_1991,

please try this:

base search
| stats values(status) AS status sum(count) AS count BY service_name

Ciao.

Giuseppe

[spl_1991]

Hi @gcusello ,

Thanks a lot and it worked....grazie!!