I want to combine the below 2 ouputs into single line
| stats count by Domain
| stats values(Domain) by Short_Host
The expected output is
Short_Host Values(Domain) Count by Domain
You can combine several line with "," and count for a specific values
| stats count(eval(Domain="y")) , count(eval(Domain="x")) by Short_Host
| stats values(Domain), count by Short_Host gives me overall count. But i need individual count by Domain.
something similar to values,count group by short_host. For each short_host multiple domains and corresponding count in a table format.
Apologies. My expectation is as per below:
Short_Host Values(Domain) Count by Domain
host 1 abc 11
xyz 15
def 20
host 2 abc 06
xyz 27
def 34