I apologize if the following question might be a bit basic. But I'm confused with the results. When I append the following code into the "search" line, it returns a shortened list of results. (f...
See more...
I apologize if the following question might be a bit basic. But I'm confused with the results. When I append the following code into the "search" line, it returns a shortened list of results. (from 47 to 3) AND ("a" in ("a")) original code. index=main_service ABC_DATASET
Arguments.email="my_email@company_X.com"
| rename device_model as hardware,
device_build as builds,
device_train as trains,
ABC_DATASET.Check_For_Feature_Availability as Check_Feature_Availability
| search (Check_Feature_Availability=false) AND ("a" in ("a"))
| table builds, trains, Check_Feature_Availability I was expecting to see the same number of results. Am I wrong about my expectations, or am I missing something here? TIA index=main_service ABC_DATASET Arguments.email="my_email@company_X.com" | rename device_model as hardware, device_build as builds, device_train as trains, ABC_DATASET.Check_For_Feature_Availability as Check_Feature_Availability | search (Check_Feature_Availability=false) AND ("a" in ("a")) | table builds, trains, Check_Feature_Availability