index="*Value of index*" tag="*Value of Tag*" DATA="*code for data1*" | chart count by parameter1 | rename count as "Count of DATA" | sort - "Count of DATA"
As a result, i want to see a table, which display every parameter1 Value, the count of data1 and count of data2 (which isnt in the string within) but both data values seperate. What can I do?
↧