How do i combine these stats commands?
1)
| stats count by user host
creates table:
user host count
2)
| stats first(_time) AS latest by user host
user host latest
How do i combine to create a table
user host latest count
This?
| stats count, first(_time) AS latest by user host
??
View solution in original post