Hi, I have a search that contains millions of events and is extremely slow, is there a way to speed it up?   This is the query:   index=audit | table db_name | dedup db_name | outputlookup audit.csv     ... View more

Hi, i have more ip address in a field like this: host |     IP               h1         10.0.2.2; 10.0.2.1 h2         10.0.2.3; 10.0.1.1 h3         10.2.2.2   I want expand the IP field like this h1 10.0.2.2 h1 10.0.2.1 h2 10.0.2.3 h2 10.0.1.1 h3 10.2.2.2   is there a way to produce a result like this?   Thanks ... View more

Hi, from two columns, in order to create a report, i need to remove the elements that are present twice, not only remove the duplicates (dedup is not useful because it only removes duplicates) but also the original elements, for example: Table A | Table B 10.10       10.2 10.21       10.32 10.2          10.3 10.60       10.21 Table C (result) 10.10 10.32 10.3 10.60 thanks for your help ... View more