How I can find duplicate fields in other message action on one index?

[darkbenladan]

Hi colleagues.
I have many fields on other tasks on other message action in one index.
My aim - find all duplicates fields, string, and their contents.
I find this prufs -
https://answers.splunk.com/answers/432/how-do-i-find-all-duplicate-events.html

index=ufo "message.Action"=ProcessIB | rename _raw as raw | eval raw_bytes=len(raw) | transaction dupfield raw maxspan=1s keepevicted=true | dedup raw