I have a known value (eg. "rabbit") that I want to search for but it is in a unknown column in a large csv. Is it possible to do something like: index = "index" | where * == "rabbit" "*" being a wildcard of sorts. ... View more

I have a .csv with fields tcp_srcport, and tcp_dstport. I want to find the total amount of traffic using each port. For example Query 1: index="index" | stats count by tcp_srcport Results: tcp_srcport | count 22 6 80 54 Query 2: index="index" | stats count by tcp_dstport Results: tcp_dstport | count 22 1 80 73 However, what I'm looking for is: Traffic per port | count 22 7 80 127 How do I do this? ... View more