Hi everyone,
I have a requirement to use mvcombine after stats.
When I use mvcombine the sparkline stops working and presents the sparkling number values instead of the line. Has anyone s...
...reating a multivalue version of field1. Easy! Just use mvcombine, with a query like...
index=test_query
| stats count
| eval field1="host1"
| eval field2=mvrange(1,7,2)
| table f...
Is it possible to combine multiple rows into one row ?
COLUMN
frow1
frow2
frow3
to something like
COLUMN
frow1,frow2,frow3
Mvcombine combined all the rows to one row but they a...
Hello Everyone! I have a field(FieldA) which contains multiple URLs together. I would like to have a new field(FieldB) with the list of last part of all the URLs. FieldA: https://........
Hello everyone, There is my search : my_severity=error my_app="name" earliest=-48h latest=-24h | stats count as nb_yesterday by my_method limit=0 | appendcols[search my_severity=err...
Hello,
I would like all the values from my query to be selected by default in my multiselect button.
As the result of my query is not static I can´t use <default>.
Any help is greatly app...
Hi All,
I have a multivalued field. I want to take values from one field and append the same to all the values of a multivalued field. The number of values present in multivalued field is NOT con...
I need the ability to dedup a multi-value field on a per event basis. Something like values() but limited to one event at a time. The ordering within the mv doesn't matter to me, just that there aren...