I read in another answer that if the ip addresses are private, the command won't work. (quite obvious now that I think about it) ... View more

Hi Venkat_16, I'm trying to use your code to hide lat/long values and display some other values which are part of geostats. hiding lat/long works well. but didnt understand correctly how to add a value. Do we need to provide the field value with content: " " ... View more

Well, you can use dedup command with sortby: | dedup LYC_USERNAME sortby -_indextime This will keep only the first (oldest) occurence of LYC_USERNAME in your results, then you can build your timechart / streamstats on this. Note that in this example the sorting is done by the time of indexing the event. This might match your requirements, otherwise change this to another field. ... View more