retrieve search fields as table

[ma_anand1984]

I'm extracting a field say JVM (in props.conf). Now I want to write a search where i want JVM in one column and source in another. Just two columns. How can i achieve that?

[kristian_kolb · Accepted solution]

* | dedup JVM source | table JVM source

this will create a table with the unique combinations of JVM and source.

* | dedup JVM | table JVM source

will find unique values of JVM, and table them along with the corresponding source value.

/kristian

[ma_anand1984]

Thank you Kristian. this time im sure gonna tell your wife 😉

[MHibbin]

*| table JVM source

[ma_anand1984]

thank you 🙂

[MHibbin]

... what kristian said 🙂

[ma_anand1984]

Thank you. How can i get only unique values