I need to display _time field1 field1 where field 1 and field 1 are the same, however if you try to do this it wont display the second field.
so renaming wont work.
so i need
_time field1 field1_copy
however i cant seem to find a copy command.
I have tried autoregress task_name AS task_name_n p=1, but i lose one value
Like this:
| eval field1_copy=field1 | table field1 field1_copy
cheers 🙂