I have a search that results in an IP address as the result with the field name **clientIP**:
host=hostname SSL=TLSv1.2 | stats count by clientIP
Now I want to take the results and use as a search using the same values for **clientIP**, renamed as **RequestIP**, such that I'm using the IP addresses from the initial result and using that to count addresses:
host=hostname2 RequestIP | stats count by task
↧