How to group the data?

Comments

1 comment

  • Avatar
    Latimer Luis

    You may want to consider reviewing our Transpose operator. I believe what you're looking for should be possible with the following:

    _sourceCategory=prod/* and source ="xyz" | parse regex "collectorStatus=(?<status>.*?)[,|\]]"
    | count(*) by source,status

    | transpose row source column status

    0
    Comment actions Permalink

Please sign in to leave a comment.