Hello, So I have to count the number of resulted fields, it doesn't go far than this. for my search I have index=example sourcetype=example source=example, and the goal is to know how many field...
I have a search for which I need to tune out a large number of values (about 25) in a proctitle command field. Currently using: NOT proctitle IN ("*<proc1>*", "*<proc2>*", ..........
How to count total row number of non-zero field? Thank you in advance Below is the data set: ip Vulnerability Score ip1 Vuln1 0 ip1 Vuln2 3 ip1 Vuln3 4 ip2 Vuln4 0 i...
Hello!
I want to know how to count numbers of field values.
Currently I have two fields, something like:
User - Anna Class - Math, Science, English
The “Class" field is a multivalued field...
Field = 1.123456789
Field = 14.123456
Field = 3.1234567
I need to run a query that will return the number of decimals for each record in Field.
Expected Result:
9
6
7
...igit numbers are easier to read with commas but the usual formatting solution: eval Download=tostring(Download, "commas") eval Upload=tostring(Upload, "commas") Had mixed results depending on where i...
...alue of the max field value, in this case, something like:
... | table Name, Address, 5
My problem, my dataset changes every day and i need only the value of the current day (the number p...
Hello!
In any event i have two fields, something like:
User - Bob Hobbies - Singing, Dancing, Eating
The "Hobbies" field is a multivalued field, and i want the output to be something like t...
...bsp;
| eval totalpaths = mvcount(paths) retuns nothing
| eval totalpaths = mvcount(paths{}) return 1
is there a way how i can return the number of total path ?
how i can list all paths ?
I...