Hello
I have a chart which looks like this ..
src InQueueForX InQueueForY InQueueForZ
X -----------10
Y ------------------------ 20
Z ---------------------------------------------30
How can i modify it. so that i get all the information in 2 columns as shown below
src InQ
X 10
Y 20
Z 30
Thanks.
Sheshank
Got the answer 🙂
mvappend did the job ..
| eval InQ=mvappend(InQForX,InQForY,InQForZ)
| table src,InQ
Got the answer 🙂
mvappend did the job ..
| eval InQ=mvappend(InQForX,InQForY,InQForZ)
| table src,InQ
In case you want to know, you can use nested coalesce as well to achieve the same
| eval InQ=coalesce(InQForX,coalesce(InQForY,InQForZ)) | table src InQ
awesome ... that one works too .. thank you 🙂