It is not working since mvzip will process only X and Y fields. It worked with the below. eval zip= mvzip(mvzip(Cluster,Current),Max)|mvexpand zip|eval zip=split(zip, ","), Cluster=mvindex(zip, 0), ...
See more...
It is not working since mvzip will process only X and Y fields. It worked with the below. eval zip= mvzip(mvzip(Cluster,Current),Max)|mvexpand zip|eval zip=split(zip, ","), Cluster=mvindex(zip, 0), Current=mvindex(zip, 1),Max=mvindex(zip, 2) I am left with threshold, if the current is above 85% than Max, it should trigger an alert.