Thanks for the response.
I am gettting the following:
"Error in 'where' command:Typechecking failed. "-" only takes numbers."
The data in the lookup is %Y-%m-%d
... View more
I believe you need something like this
|inputlookup Sourctype.csv|fields + index, sourcetype, desc, owner, os|eventstats count by sourcetype
THis will just a new columns count with count based on sourcetype, keeping all rows together.
... View more