Hello!
I have lots of messages field structured as following :
"Running tests for project: Project A - description"
and need to extract/substring the second part after the colons and count(distinct) them.
Is it possible in kibana , or should I use lucene syntax via curl/json request ?
Thanks for your help!
Mirco