I'm not sure I've used the correct terminolgy to ask a question, so I'll jump into example:
input:
Name,beers
Bob,6
Anna,7
Bob,4
Anna,3
Anna,9
Bob,10
Bob,11
I want to count how many times Bob was below 5 and count how many times Anna was below 8. In this case, desired output looks like this:
Name,Below,Above
Anna,2,1
Bob,1,3
In my struggles came up with this:
search ... | eval Desc=case(beers<=5, "Below", beers>5, "Above") | chart count over Name by Desc
This would have worked, if I had one criteria, but each of the names have its own.
Thanks in advance ...
... View more