Hi community, I have a question on counting the number of events per values() value in stats command. For example having events with src_ip, user (and a couple of more) fields. I would like to count each of the user occurence in the raw log. Example as below. | stats values(user) as values_user by src_ip Example: _time user src_ip 2025-08-11 ronald 192.168.2.5 2025-08-11 jasmine 192.168.2.5 2025-08-11 tim 192.168.2.6 2025-08-11 ronald 192.168.2.5 I would like to have result as values_user count_vaules_user src_ip ronald jasmine ronald:2 jasmine:1 192.168.2.5 tim tim:1 192.168.2.6
... View more