Hi,
could you please help me with below info:
user service name device
abc123 baadmin Brahma Louwps121
bcx123 admin siva louwps123
bxc111 admin Brahma Louwps123
abc123 backup vijay Louwps101
cxz123 backup Brahma Louwps123
cxz123 backup raghu Louwps001
czx101 DM1 Brahma Louwps111
from this if I need to find out "Brahma" with that field value the remaining filed values that are associated with remaining field values in another fields.
Hi @90509,
I'm not sure to understand your need:
is this correct?
If this is your need, you should run a search like this:
index=my_index
| stats values(user) AS user values(service) AS service values(device) AS device count BY name
Ciao.
Giuseppe
Thank you . your function is working ,I apologies for not accepting your answer because he has sent first. I hope you have great journey.
No problem!
Anyway, you can upvote other answer!
Ciao and next time!
Giuseppe
try this-
|stats values(*) as * by name|where name="Brahma"
Thank you . Have a great journey !