I have 2 columns 1 has application name another has number of instances . I want to remove duplicate application name but same time instance count should show addition of all the instance for the same application name. I'm using dedup but instance count addition need some other logic.
APPNAME | INSTANCECOUNT |
sap | 2 |
oracle | 4 |
sap | 2 |
git | 2 |
oracle | 4 |
Thank you so much .
Dedup might not be want you want since it just keeps the first event for each of the unique values
| stats sum(INSTANCECOUNT) as INSTANCECOUNT by APPNAME