Can anyone help me making this table?
I have the field Status, wich has events Status=1, Status=2, Status=3.
I need to count events for each and make a table for each, example
Channel | Total Status = 1 | Total Status = 2 | Total Status = 3
Channel A
Channel B
Channel C
This is my current query:
index=main sourcetype=control | stats count, values(Status) as Status by STATUS | table Channel, count
... View more