how group a field values with the maxevents of 4, without using transaction command

[vinod743374]

Hi everyone,

i need an alternative for the transaction command, bcoz its taking to much time to load the dashboard,

this is my actual data

Botid             count

1528               1 

1228               1

1015              1

1558              1

12                    1

1698              1

1589.15        1

1589              1

am looking for an output like below

BotId                                                               count

1528,1228,1015,1558                              1

12,1698,1589.2,1589                                2

thanks in advance

[ITWhisperer · Accepted solution]

| table Botid
| streamstats count as row
| eval row=row%4
| streamstats count(eval(row=1)) as count
| stats list(Botid) as Botid by count
| eval Botid=mvjoin(Botid,",")