About mituw16

mituw16 · ‎08-22-2023

oh good point! I hadn't noticed that possibility. Thanks!

mituw16 · ‎08-22-2023

Unfortunately the IPAddresses are logged in that manner (2 addresses with a comma) in the applications themselves. My query didn't combine them like that. That said, I ended up figuring it out. Used this. prequery | stats count(Customer) as CustomerRequests values(IPAddresses) as IPAddresses by Customer | eval IPAddresses = mvjoin(IPAddresses, ",") | table Customer, CustomerRequests, IPAddresses | sort -CustomerRequests This produced the desired output of Customer Requests IPAddresses <guid here> 1000 192.168.0.1,192.168.0.2,192.168.0.3,192.168.0.4,...etc

mituw16 · ‎08-21-2023

I have a big query that produces output like this. Those rows are guid id, count of occurrences, then ip addresses (they're stored in csv like that in raw data). What I'm attempting to do is basically combine instances of the same guid, sum all occurrences, and then have a column that would be a big csv of ALL ip addresses for the guid. I've tried many things, but not having any luck.

Posts	3
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎08-21-2023

Online Status	Offline
Date Last Visited	‎08-21-2023 06:49 PM

How to create stats count by combine values?

Re: stats count by combine values

Re: stats count by combine values

How to create stats count by combine values?