I'm working with multiple logs which have different field naming conventions for the same date. Is there a way to list out fieldnames (by sourcetype) ?
I'm pretty sure you can use this as a start and do some fancy stuff out of it:
| stats dc(*) as * by sourcetype
View solution in original post