Hi guys, so I need some data to put into a dashboard table, but the problem is that the data contains everything twice per row.
This is the query I use:
index=epo_script "EPOProdPropsView_VIRUSCAN.datver"="*" "EPOProdPropsView_VIRUSCAN.enginever"="*" "EPOProdPropsView_VIRUSCAN.productversion"="*"
| dedup EPOLeafNode.NodeName
| sort EPOLeafNode.NodeName
| table "EPOLeafNode.NodeName", "EPOProdPropsView_VIRUSCAN.datver", "EPOProdPropsView_VIRUSCAN.enginever", "EPOProdPropsView_VIRUSCAN.productversion"
Which results in this:
![alt text][1]
[1]: /storage/temp/218576-table1.jpg
As you can see it shows everything twice per row. I tried using the *| mvdedup* command, but that resulted in no values showing at all.
Anyone have any tips for this? Thanks!
↧