I got answer for the same. Thanks Renjith and All. ... View more

Let me explain again clearly, TFN=Test Field Name, TFE1=TestFieldEntry, TFE2=TestFieldEntry, C=Field found out from Eval, A=Count of values that is found with based on available fields, B=Count of values that is found with based on available fields. TF has two types of entries. They are TF1 and TF2 respectively. C is calculated like C=A-B. Used the below query. |convert auto(A)|appendcols[|convert auto(B)]|eval C=A-B|table A B C With the above query, I am getting the below result as follows. C B A 4 5 9 I need to get the values of C and B using the by clause grouped by TFN to get the result in the following manner. TFN C B TFE1 1 2 TFE2 4 5 Please tell me whether you understand this explanation. ... View more

I did the following eval num_field = tostring(num_field)|stats num_field by Field. It was working till tostring conversion. Throwing error if I use the stats command. The error as follows Error in 'stats' command: The argument 'Field' is invalid. ... View more

My Bad, Gave the requirement incorrectly. Sorry. Here A is Total, I have found B. To find C, I do C=A-B, As of now I am able to get the result as follows: TF C B A TF1 1 2 3 TF2 4 5 9 Actually need the query to be displayed as follows: TF C B T1 1 2 T2 4 5 ... View more