What I'm looking for is a hybrid of the stats list() and values() functions. First, I'd like the list of unique values for a multivalue field, then alongside each unique value, I'd like the count of occurrences of that value. Is this possible?
Maybe this is better illustrated through an example.
Given a set of events like this:
03/12/2013 15:55:00 id=foo abc=123,123,123
03/12/2013 15:56:00 id=bar abc=123,456,789,789
I can get tables like these with the list() and values() functions, respectively:
id abc id abc
---------------- ----------------
foo 123 foo 123
123 bar 123
123 456
bar 123 789
456
789
789
But what I really want is this:
id abc
----------------
foo 123 (3)
bar 123 (1)
456 (1)
789 (2)
I believe this to be possible... for a search query superhero (which I am not). 🙂
... View more