In a search, Is there an alternative for the eventstats command?

[patricianaguit]

I need to find another way instead of eventstats for my search.

Is there a way where I can tag the events and add another field based on hierarchy other than eventstats?

For example
Id 1 has different initial tags (A,B,C, and D) since A is the highest, the final tag should be "A"

ID   |                InitialTag               |  FinalTag
1                        A                            A
1                        B                            A
1                        C                            A
1                        D                            A

Tag Ranks:
A
B
C
D

[harishalipaka · Accepted solution]

hi @patricianaguit

Can you try this

you can use streamstats
or

 |stats values(InitalTag) by ID 

[patricianaguit]

thank you!