I have basic web logs with username and jsessionid. I want to group (assume a single index, with one set of data). So thousands of events. I want to group by jsessionid and username - creating supergroups. Example: username:jsessionid tom:1234 frank:1234 bob:1234 bob:5467 sally:5467 sally:9012 amy:9012 harry:4709 tony:4709 I would wind up with 2 groups - a small group with just harry and tony, and a larger group with tom, frank, bob, sally, and amy due to shared jsessionid. I would like my output to contain some kind of group ID or Group Name. I would have no knowledge of username or jsessionid - I just want to be able to loop through the data and assign users/jsessionids to groups where they exist. My first thought is to sort by jsessionid, but I can't figure out how to loop through the data and create dynamic group names. Thanks for any ideas, not an SPL expert.
... View more
