Question: I'm trying to compare SQL results between two databases using stats and xyseries. Everything is working as expected when we have unique table name in the events but when we have same table name multiple times (3 times) in the events, xyseries is printing the table name only once instead of 3 times. So, how do we print same table name 3 times in the output. Below is the query which i'm using. (index="ABC_index" source=XX ) OR (index="XYZ_index" source="YY" ) | fillnull value=NULL | eval Env = if(source="yy", "P", "C") | rename TABLE_NAME as TABLE_NAME | rename CONSTRAINT_TYPE as CONSTRAINT_TYPE | rex field=_raw "COLUMN_LIST=\"\s+\((?P<Column_List>\w+)" | rename R_CONSTRAINT_NAME as R_CONSTRAINT_NAME | stats count by TABLE_NAME CONSTRAINT_TYPE Column_List Env R_CONSTRAINT_NAME | xyseries Column_List, Env, TABLE_NAME, Column_List, CONSTRAINT_TYPE R_CONSTRAINT_NAME grouped=TRUE sep="_" | table TABLE_NAME_C TABLE_NAME_P Column_List_C Column_List_P CONSTRAINT_TYPE_C CONSTRAINT_TYPE_P R_CONSTRAINT_NAME_C R_CONSTRAINT_NAME_P | fillnull value=NULL Results attached: In the below output, table name is printed only two times and 3rd time is missing in the results. So, how do we display all 3 times. Thanks for the help in advance.
... View more