list()
Table of Contents
Definition
list() returns a list of up to 100 values in the table column as a multi-value entry. You can use it with transform commands that support aggregations.
Examples
You can use list() with stats or other charting commands. The following example returns a list of values in operation column and groups them by user column. In addition, the query counts the total number of operations per user.
%dpl
index=join_json_one earliest="01/01/2021:00:00:00"
| spath
| stats count as total_operations, list(operation) by user