Hello is there a way to recreate this using Lens,
The goal is to show a user with all instances of ip addresses and host name with last timestamp for each.
I was able to do it as two separate aggregation data tables:
Issue still remains as this dependent on filtering and would be nice to have to a way to put this all into one report so it can be exported.
Hi @erikg
I see. I guess your reporting would be something like CSV.
The only alternative I can propose here to unify, is to define in the left table a metric column as overall_sum(unique_count( logon_time_field)) who will be repeated for each row:
With that the table should be single and it would be possible to have a CSV.
1 Like