To add some more information to my Question. The data is regarding which applications that was started from specific computers. So i want to filter out computers that have started more than 1 application, or even a specific application if that helps.
I tried dedup, but it still shows computer if they have more applications.
This is example of the output.. I only want PC005291 to be showed if 1 unique entry with application
Field Field Field Field
_time Application Activity extracted_Host
05/09/201811:48:27.000 Autostart SP IE11 Proxy PC005291
05/09/2018 11:45:54.000 VA - login til StoreFront Proxy PC005291
Thanks
... View more