Hi, I have some documents that looks like this:     { "document_id": "some-id", "status": "some-status", "fields": "some values", "stages": [ { "duration": 0.031, "name": "my_name", "more_fields": "more_values", "array_field": [...], }, ... ] }     The length of the stages field can be quite large. I would like to calculate the avg or median duration for each type of stage but not for all stage types. Here is what I have initially:     data_source | fields status, stages{}.name as sname, stages{}.duration | eval stage_fields=mvzip('stages{}.name', 'stages{}.duration') | where job_result in ("some-status") | mvexpand stage_fields | fields stage_fields | rex field=stage_fields "(?<stage_name>.+),(?<stage_duration>.+)" | where stage_name in ("my_name", "other_name") | timechart span=1h median(stage_duration) as "Median Stage Duration" by stage_name | rename stage_name as "Stage Name"      This obviously starts truncating results because mvexpand starts expanding into a huge number of fields and complains about memory limits. I tried to put an mvfilter before it so that it only expands those stages that I am interested in but obviously I didn't know how to use it so that ended up as a no op. So the question is how can I make this query more efficient? Thanks! ... View more