Hello Community,
I am having issues combining results to display in a pie chart - I tried a few things such as mvappend and it's not working correctly.
I have pulled a list of Domains and want to display them in a pie chart. To get the list of domains and display them in a chart I am using the following:
rex field=netbiosName "^(?<Domain>[^\\\\]+)" | stats count by Domain
This works as intended, but I have a couple of results that come up as both 'domain1' and 'domain1.com' and are displayed in the pie chart. I would like to combine these results, so that the count for both 'domain1' and 'domain1.com' is added together under just 'domain1'
Thanks
... View more