Hello, I am trying to join together results from two queries that contain aggregate operators like count.
The base query is something like this:
| parse "seller_id=*;" as seller_id
| parse "price=*" as price
| count(price) as sales, sum(price) as revenue by buyer_tier, seller_id
I'd then like to join that to the following query on query1.seller_id = query2.duplicate_seller:
| parse "duplicate_seller_id=*;" as duplicate_seller
| count(*) as duplicates by duplicate_seller
The desired result would be fields: query1.seller_id, query1.sales, query2.duplicates. Is there a way to use the join operator to combine these results into one table view?
Please sign in to leave a comment.