I want to write the query which will number of count the event occurred and time taken for that.  This is the log  - log: 2024-07-01 16:57:17.022 INFO 1 --- [nio-8080-exec-6] xyztask : FILE_TRANSFER | Data | LOGS | Fetched count:345243 time:102445ms time: 2024-07-01T16:57:17.022583728Z   I want result like - | count           | time | | 2528945    | 130444 | Query that I am writing  base search | stats count by count | stats count by time | table count time For  stats count by count I am getting error -  Error in 'stats' command: The output field 'count' cannot have the same name as a group-by field Query isn't right, correct solution would be helpful. Also tried different queries different ways.     ... View more

I am writing a query which will give total time taken by a log/event for execution in milliseconds : index=xyz cluster_id = [cluster_id] "logs_statistics"| rex field=_raw "Total Time taken in milliseconds: (?<totalTime>.*\d+) \n*"|table time totalTime This executes but totalTime is null as shown below : time                                                                    totalTime 2024-06-23T03:00:45.038422703Z   2024-06-23T03:00:15.453872121Z   2024-06-23T03:00:23.33625642Z   Expected : time                                                                    totalTime 2024-06-23T03:00:45.038422703Z 544 2024-06-23T03:00:15.453872121Z 528   What am I missing ? ... View more