| inputlookup abc.csv | eval CompanyCode="DSPL" | eventstats values(CompanyCode) as CompanyCode | eval 3Let=case(CompanyCode == "DSDE", "BIE", CompanyCode == "DSDE-AS", "PUT", CompanyCode == "DSDE-FS", "STL", CompanyCode == "CSDE", "DAR", CompanyCode == "DSPL", "RAD", CompanyCode == "DSMX", "QUE", CompanyCode == "DSUS", "SSC") | where '3Let'='place' | sort - timeval | table count timeval | head 1 |appendpipe [stats count | where count==0 | eval timeval=strftime(now(),"%Y") | where count==0]
... View more