Hi , I am running a query to get count of unique users like | stats dc(user)
How do I get list of those unique users?
Hi @rashi83, Try this:
your_search | dedup user | sort user | table user
Ciao. Giuseppe
Try this:
| stats values(user)
You can combine it with the distinct count like this
| stats values(user) as users dc(user) as usercount
Alternatively:
| stats count by user
