I have 4 unique and standard values under one field extraction topic. I want to combine them into two values and use the output for my tokens in dashboard panels.
topic | count
A | 10
Aa | 10
B | 5
bb | 5
Required output
topic | count
A | 20
B | 10
Can we have to some real sample output? What type of values does the field topic contains?
Try this
base search | stats sum(eval(if(match(topic, "^([A|a])", count, null()) )) as A sum(eval(if(match(topic, "^([B|b])", count, null()) )) as B