Hello,
I'm trying to pull the final value for a product name. In a single event, we make multiple calls to an API for the product name and the product may change with each API call. I'm trying to build out a table for the final product name (the field doesn't change), but can't figure out what command to use.
Here's what I have so far.
index=conversation crm_accounts_phone__product_name=*
| rename crm_accounts_phone__product_name as product
| stats latest(product)
| table product
Appreciate any help!
If latest() is not working for you, try
| stats last(product)