Hi community,
I am trying to write a query that looks for bulk email (say >50) from a single sender to multiple recipients, that has a unique subject.
Sender
Recipient
Subject
bob @ scamm . com
alice @ mycompany .net
spam for alice
bob @ scamm . com
jane @ mycompany .net
spam for jane
bob @ scamm . com
fred @ mycompany .net
spam for fred
I can add this to my search:
| stats count by subject sender recipient | search count>50
but I just want to see results where the subjects are unique, but the sender is the same.
Ideally I'd like to have it spit out a table of the sender, subject(s) and recipient(s) Thank you
... View more