I have multiple devices in a given location maintaining it lookup table with location and device.
Using location from index I am trying to get device list but output is coming in single row. I want list of devices as separate row. How to achieve it.
My query is like this
| lookup mylookup location OUTPUT devices
| table devices
please, try something like this:
index =myindex | append [ | inputlookup mylookup | fields location devices ] | stats values(devices) AS devices by location | mvexpand devices