Hi, I want my data presented in a very specific way, which means I can't go the typical route of just adding the field I want presented after the by in my stats command as I'm using transpose on the header fields. I can't use eventstats because that completely messes up my stats table. This is the search: | datamodel Test summariesonly=true search | search "TEST.date"=2021-05-18| rename "TEST.date" as date | rename "TEST.uri_path" as uri_path | eval category=case(like(uri_path, "/url1), "highPriority", uri_path="/url2", "unattended", uri_path="/url3, "lowPriority", uri_path="/url4", "largePayload") | rename "TEST.response_time" as response_time | stats avg(response_time) by category | rename avg(response_time) as averageResponse | eval averageResponse=round(averageResponse,3) | transpose 0 header_field=category | fillnull value=0 highPriority, lowPriority, largePayload, unattended | fields highPriority, lowPriority, largePayload, unattended, date I want to be able to fill my date field with the previously defined date field
... View more