Here, in this code, because the top Command returns the fields of count and percent, the table command retains only the clientip value. Sourcetype=access_* status=200 action=purchase | stats count, distinct_count(productId), values(productId) by clientip
0 Comments
Leave a Reply. |