Try something like this | eval combined=mvzip(name,mvzip(location,description,"|"),"|")
| stats count by combined
| eval name=mvindex(split(combined,"|"),0)
| eval location=mvindex(split(combined,"|...
See more...
Try something like this | eval combined=mvzip(name,mvzip(location,description,"|"),"|")
| stats count by combined
| eval name=mvindex(split(combined,"|"),0)
| eval location=mvindex(split(combined,"|"),1)
| eval description=mvindex(split(combined,"|"),2)