Hello, I hope someone could help me out figuring out this one out. The core of what I am trying to do is get a list of all event codes in an index and source sorted on source to understand what is sending information if I am missing anything.  index=acg_eis_auth EventCode=* | dedup EventCode | fields EventCode | stats count by EventCode ... View more