My question is :
i have output in this format :
a _time
b _time
a _time
b _time
i want all these outputs alone with a coloumn that gives the _time (as start time) for only b type rows
Hi shraddhamuduli,
I don't know the fields you extracted, anyway, if "a" column name is "fieldA", try something like this:
your_search fieldA="b"
| table _time
Bye.
Giuseppe
its like this :
Starting Acquisition Sources Database source '20170924'SourceQuery_0 for DataSource 'Transaction' and Domain(s) TMS
Commit of Processing State started for Domain 'TMS' and OrgUnit '-FR'
Starting Acquisition Sources Database source '20170924'SourceQuery_0 for DataSource 'Transaction' and Domain(s) TMS
Commit of Processing State started for Domain 'TMS' and OrgUnit '-MM'
these are 4 rows ...
my job is clubbed like this, first is the database acquisition(this is the start time) , next is the commit of processing state started . Ex; For job FR , my job start time is the time for database acquisition . and then the job starts at commit of processing time..but my actual time the job FR started in system is the one for database aqcuisition .....
current output -
a _time
b _time
a _time
b _time
if you want the output be like -
b _time
b _time
your_search fieldB="b" | table fieldB _time
or, please update us your current query which gives the output as you shown on the question.. then we can edit that query..
Hi shraddhamuduli,
I don't know the fields you extracted, anyway, if "a" column name is "fieldA", try something like this:
your_search fieldA="b"
| table _time
Bye.
Giuseppe
its like this :
Starting Acquisition Sources Database source '20170924'SourceQuery_0 for DataSource 'Transaction' and Domain(s) TMS
Commit of Processing State started for Domain 'TMS' and OrgUnit '-FR'
Starting Acquisition Sources Database source '20170924'SourceQuery_0 for DataSource 'Transaction' and Domain(s) TMS
Commit of Processing State started for Domain 'TMS' and OrgUnit '-MM'
these are 4 rows ...
my job is clubbed like this, first is the database acquisition(this is the start time) , next is the commit of processing state started . Ex; For job FR , my job start time is the time for database acquisition . and then the job starts at commit of processing time..but my actual time the job FR started in system is the one for database aqcuisition .....