Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to combine unique values of the field into one?

$
0
0
I am trying to make a report with the unique combination of ID, AVER SRV & ZONE. However, since I am getting lots of duplicate values because I have multiple values for ZONE, is there anyway I can combine all the ZONE in one field so I won't have lots of duplication. Currently I am using following query: | dedup ID AVER SRV ZONE | fields + ID, SRV, ZONE Now if the Zone has multiple values, I am getting multiple entries instead I am trying to have one entry with all the different zones combined. Please advise.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>