I tried the following: index=<myindex> | stats values(*) AS * | transpose | table column | rename column AS Fieldnames index=<myindex> |table * index=<myindex> fieldsummary | table* every search comes back as 0 Events and Statistics (0) Like I said I feel like I'm missing something simple.
... View more
I feel like I'm missing something simple here. I've copied/pasted the query and it doesn't work. I've tried the options listed below and come back with 0. Can anyone think of a reason why that might happen?
... View more