Hi,
I have below sample dataset. This dataset is for an asset being compliant or not compliant. What I need is:
Is:
To Be:
Thanks in-advance!!!
Hi @mbasharat,
Please try below after your base search;
| stats values(Status) as Status by DNS
| eval Status=case(Status="Non_Compliant","Non_Compliant",Status="NA","Compliant",1=1,Status)
Hi @mbasharat,
Please try below after your base search;
| stats values(Status) as Status by DNS
| eval Status=case(Status="Non_Compliant","Non_Compliant",Status="NA","Compliant",1=1,Status)