I have a search that I have been asked to organize in a different way.
Mysearch | rex (FieldA)(FieldB)(FieldC)(FieldD) | chart latest(FieldD),FieldC by FieldB by FieldA
FieldD and FieldC have unique values
There will be multiple FieldD values for each FieldB and multiple FieldB values for FieldA
That will be for the full list, at some point I have been asked to do a relation for the top values of FieldD compared to FieldB as well.
I am a bit lost as to how to proceed with this.
