I am trying to extract only the top values from fields such as argument, uri, and method for the WAF log. Currently, it is configured using a join statement, but the search speed is very slow, so I am looking for another method. Please give me a hint on the searchstatement that can retrieve the top values in each field at once.
... View more