How to group the data?


1 comment

  • Avatar
    Latimer Luis

    You may want to consider reviewing our Transpose operator. I believe what you're looking for should be possible with the following:

    _sourceCategory=prod/* and source ="xyz" | parse regex "collectorStatus=(?<status>.*?)[,|\]]"
    | count(*) by source,status

    | transpose row source column status

    Comment actions Permalink

Please sign in to leave a comment.