Hi @gcusello    Thank you very much, that is now working!   It is stripping the comma delimiter, and stacking the values in the table, but I think I will be able to sort that out now  you have helped me get the basic rex working though.   Thanks again. Kudos, Regards, John ... View more

Hi @gcusello Thanks for responding. Unfortunately, that's still not returning any results for the MicGainText field.  Cheers, John ... View more

Hi Rich, Both of those steps you have suggested are what I have already tried, but they do not seem to be getting applied. If you have a suggestion how I can make my preferences "stick", I'd appreciate it. Thanks, Regards, John     ... View more

Hi @gcusello  I think we're getting there. For some reason, every pairing is returning the same count. I think I need to explain that these results I am searching are being returned to the database constantly.  I'm not sure of the  exact frequency, but I think the values are polled approximately once every 3 or 4 minutes. I changed the time range to "last three minutes" and each pair then gave me a count of 2. Before that(with a time search of 1 hour) each pair said it was returning 26 values.  However when I click on the pairings, sometimes there are 4 rooms, and sometimes there is 1. One of the pairings returning 1 room should be actually returning over 800. Sorry about this. If it's becoming too difficult and you need to stop helping, I really appreciate all the assistance, and I am certainly a lot closer than I was a short while ago! Regards, John     ... View more

Hi  @gcusello  Thanks again. The where clause is returning an error: Error in 'where' command: The expression is malformed. An unexpected character is reached at '=2 '. Regards, John       ... View more

Hi Giuseppe, @gcusello  Thanks for answering. Apologies if my description was not clear enough. My replies are at the end of your bullet points inline: your events have three fields: RoomName, AttributeID and RawSerialValue;  ........................Correct among all the events you are interested in those in which AttributeIDs has value: "Config Filename" or "Processor Firmware";  .....................Correct you want to correlate the events that have the same RoomName and select those in which AttributeIDs have both values: "Config Filename" or "Processor Firmware"; ......................Yes, I need to correlate the  events for the RoomNames that have both values. you want to display RoomName and RawSerialValue of those that appear for a greater number of times;.........I'm not sure I completely understand this statement... But you have certainly assisted me to clarify what I am actually after. I want to display a table that has the  list of Config Filenames" /"Processor Firmware" pairs so when I click on one of the listings, I can then see the RoomNames that have these pairings. For example: 8 rooms called 1A, 1B, 1C....1H 1A, 1B, 1C, 1D have a Config Filename of xyz 1E, 1F, 1G, 1H have a Config Filename of uvw   1A, 1B, 1C have Processor Firmware zzz 1E, 1F, 1G have Processor Firmware yyy 1D  and 1H has Processor Firmware xxx   Output to look something like: Config Filename/Processor Firmware          Count xyz/zzz                                                                       3 xyz/yyy                                                                       0 xyz/xxx                                                                       1 uvw/zzz                                                                      0 uvw/yyy                                                                      3 uvw/xxx                                                                      1 etc.       ... View more