I am trying to remove duplicates in my result using the |dedup command. Even though I am seeing 2 entries in my result. Kindly help me to remove 1 duplicate. Labels stats table 0 Karma Reply 1 Solution Solution
The issue I am facing is I want to remove the duplicates on basis of host. I used dedup but all are removed . But its not giving me correct value. Can some one guide me how can I remove duplicates . Below is my query: <query>index=abc sourcetype=xyz source="app.log" i...
How do I edit my search to remove duplicates of a field that appear in a table column? pkeller Contributor 07-28-2015 08:36 AM Say I have a table ... host, IP, destinationHostname, Port, count host1 10.10.10.1 desthost1 9999, 33 host1 10.10.10.2 desthos...
how to remove duplicates rows based on all fields, not just one field, and display the unique rows?Let say there are 10 fields, when I used | dedup 10 field1, field2, .. field 10, the result missed some unique rowsPlease help. Thank you 0 Karma Reply 1 Solution ...
How would I combine two searches and remove duplicates with Latest_Time? gsteffen Explorer 01-26-2015 12:45 PM Hi, I have two searches that I would like to combine but I would like to remove the duplicate with the Latest_Time. My two searches: | metadata type=ho...