hi
i have one problem in making report. in my report result i have repeated name how can I avoid to not show the repeative name in result.
i put the screen shot here
i want to show last log on status for each user without showing the repeated name . how can i do it ?
Hi khanlarloo,
try something like this:
your_search
| stats latest(last_logon) AS last_logon BY user status
Bye.
Giuseppe
Try this!
(your search) |streamstats count as Number by user|eval user=if(Number=1,user,"")|table user,status,"Last Log On"