My currrent ouput is now:
file name keyword
project_plan_project.doc project
project_plan_project.doc plan
Actually i want single row at final ouput as below:
file_name keyword
project_plan_project.doc project
plan
can nomv help on this requirement??
Actually, I think that stats might work...
yoursearchhere
| stats values(keyword) by file_name
if you just need to see the values. If you want a count for each value found, then you could do
yoursearchhere
| stats count by file_name keyword
I updated my answer to include a way to count...
can i use
............|stats values(keyword) count(keyword) as keywordshit
by file name