Given events
Group MultiValue
A 7,2,9
B 8,1
I'm using makemv to pivot the results to below, but I also want a new Index/Counter field which counts (or shows the index value) and resets when it sees a new group. The accum command doesn't support a "by [field list]" so curious how to do this?
Group Value **Index/Counter**
A 7 1
A 2 2
A 9 3
B 8 1
B 1 2
Got it working like this:
| streamstats count as index by Group
Or just | stats count as index by Group
should work I assume.