How do I count the number of unique recipients of each type of unique attachment from emails. The same user could receive the same attachment in multiple emails. Using the “dedup” command?
Use the distinct_count function of the stats command.
| stats dc(recip) as recip_count by attachment_type
View solution in original post
@richgalloway Thanks, it worked, and I appreciate it.
