Is there a way to dedupe results?


1 comment

  • Avatar
    Peter Kwan

    From your question, I presume you are doing something like the followings:

    SOME_SEARCH_TERMS | parse "xyz * " as x | parse "abc * " as a

    And you are having duplicated combinations in the a's and the x's.

    You can get to one line per each combination of a's and x's by adding " | COUNT by a,x" to the end of your query. As a bonus, you will get the count for the number of occurrence for each a-x combination.

    Comment actions Permalink

Please sign in to leave a comment.