Can we aggregate the data in the specified column? example SPL A) index=pan_logs  | stats count by signature,src,dest example SPL A Result) signature_name src dest count signature-A 10.1.1.1 10.0.0.1 1 signature-B 10.1.1.2 10.0.0.2 2 signature-A 10.1.1.3 10.0.0.3 2 signature-B 10.1.1.4 10.0.0.4 2 Want to creat table) signature_name src dest count signature-A 10.1.1.1 10.0.0.1 3   10.1.1.3 10.0.0.3   signature-B 10.1.1.2 10.0.0.2 4   10.1.1.4 10.0.0.4   We want to aggregate by signature_name without changing  src<->dest combination. ... View more