count_distinct with a regularcount

Comments

2 comments

  • Avatar
    Kevin Keech

    Hi Dekel,

    The following should get you the results your looking for. 

    | parse "ERROR {*, *, *}" as itemId, errodId, errorDesc 
    | count_distinct(itemId) as idCount by errodId


    This will count the number of distinct itemIds by the errorIds found. 

  • Avatar
    Dekel Moyal

    @kevin works like a charm, thank you!

Please sign in to leave a comment.