So I am writing a query and It all gets piped into stats at the end. There is a value that I want to use to remove lines from stats as the line item is unnecessary. I understand that by will list every item but I'm looking to remove particular lines based upon a certain condition as it will help cleanup my data. What im looking todo is I run a distinct_count on an item and then for every line that the dc result is 0, remove it from my results
Just solved,
After calling my stats function
|stats <Whatever you have for stats>
| where <condition>
i just called where and it gave me the results im looking for
Just solved,
After calling my stats function
|stats <Whatever you have for stats>
| where <condition>
i just called where and it gave me the results im looking for