Like this:
| makeresults
| eval raw="5,car,sedan,300
5,car,suv,400
5,car,van,400
5,plane,com,300
5,plane,priv,300
6,booking,test,500
6,booking,test1,500
6,booking,test2,500"
| makemv delim="
" raw
| mvexpand raw
| rename raw AS _raw
| rex "^(?<Date>[^,]+),(?<Category>[^,]+),(?<Type>[^,]+),(?<Count>.*)$"
| rename COMMENT AS "Everything above creates sample event data; everything above is your solution"
| stats sum(Count) AS Count by Date Category Type
| stats list(Type) list(Count) BY Date Category
... View more