Hello! So I don't know of a way to get all of those in one search. It is very doable in a couple searches though! You should be able to do index=main
| stats count by "Grade Criteria" and get the count per result in each field. As for your ask for an argument count, that's pretty tricky actually! There may be more elegant ways of doing that, but I settled on the following (I've named the fields generically) index=main
| fillnull value=NULL
| eval arg1Null = if(arg1 == "NULL", 0, 1)
| eval arg2Null = if(arg2 == "NULL", 0, 1)
| eval arg3Null = if(arg3 == "NULL", 0, 1)
| eval arg4Null = if(arg4 == "NULL", 0, 1)
| eval numArgs = (arg1Null + arg2Null + arg3Null + arg4Null)
| table arg1 arg2 arg3 arg4 numArgs That is going to take all of your null values, or fields without a value in them, and fill them with the string "NULL". We then create fields checking whether or not the original field was NULL. i.e. if arg1 has a value, it arg1Null gets a value of 1. If it was filled with "NULL", it gets a 0. We do this for each field, then create a field called numArgs which adds all of them up. I am not sure if that is the most elegant way of doing things, but I was able to get that working! Its easy enough to rename the fields from arg1 to "Best Grade" and so on to work with your data.
... View more
