field1,field2,field3
1, a, b
1, b, c
1, c, d
2, r, s
2, s, k
2, k, l
2, l, m
field 1 is the key
based on above data, I need to as following manner
1 a->b b->c c->d
2 r->s s->k k->l l->m
If any one have an idea, please share to me..
Try this:
your search | eval changes = field2+"->"+field3 | stats values(changes) as changes by field1
Try this:
your search | eval changes = field2+"->"+field3 | stats values(changes) as changes by field1
Thanks your solution/answer is excellent. It worked for me..
once again ... thanks to diogofgm.
Thanks diogofgm ... your solution/answer is excellent.. it worked for me...