Hello @bowesmana The eval match condition worked, but it didn't give me the result I expected. Is it possible to use "eventstat match condition" to group the student based on partialname? D...
See more...
Hello @bowesmana The eval match condition worked, but it didn't give me the result I expected. Is it possible to use "eventstat match condition" to group the student based on partialname? Do you think moving to evenstat makes the search more efficient? I appreciate your help. Thank you so much without "eventstat match condition" - it worked | makeresults format=csv data="grade,name
A,student-1-a
A,student-1-b
A,student-1-c
A,student-2-a
A,student-2-b
A,student-2-c"
| eval partialname=substr(name,0,9)
| eventstats values(name) as student by partialname with "eventstat match condition" - it didn't work | makeresults format=csv data="grade,name
A,student-1-a
A,student-1-b
A,student-1-c
A,student-2-a
A,student-2-b
A,student-2-c"
| eval partialname=substr(name,0,9)
| eventstats values(eval(if(match(name,substr(name,0,9)), name, null()))) as student by grade Data: class name class-1 student-1-a class-1 student-1-b class-1 student-1-c class-1 student-2-a class-1 student-2-b class-1 student-2-c Expected result grade name student A student-1-a student-1-a student-1-b student-1-c A student-1-b student-1-a student-1-b student-1-c A student-1-c student-1-a student-1-b student-1-c A student-2-a student-2-a student-2-b student-2-c A student-2-b student-2-a student-2-b student-2-c A student-2-c student-2-a student-2-b student-2-c Currently here's the result with eventstats match condition grade name partialname student A student-1-a student-1 student-1-a student-1-b student-1-c student-2-a student-2-b student-2-c A student-1-b student-1 student-1-a student-1-b student-1-c student-2-a student-2-b student-2-c A student-1-c student-1 student-1-a student-1-b student-1-c student-2-a student-2-b student-2-c A student-2-a student-2 student-1-a student-1-b student-1-c student-2-a student-2-b student-2-c A student-2-b student-2 student-1-a student-1-b student-1-c student-2-a student-2-b student-2-c A student-2-c student-2 student-1-a student-1-b student-1-c student-2-a student-2-b student-2-c