I know that the Timelion feature is being deprecated so I'm learning TSVB and fast. My question is this:
I have a field called
responsefield which contains literally thousands of possibilities, as there are variable factors in there, such as an IP address or an ISP name, or a rule that an ISP has applied to a message that we have sent them. What I would like to be able to do is to count up the possible responses that we search for and count them.
As an example I'd like
smtp;421 4.7.0 [TSS04] Messages from a.b.c.d temporarily deferred due to user complaints - 126.96.36.199; see https://help.yahoo.com/kb/postmaster/SLN3434.html
smtp;421 4.7.4 [TSS07] Messages from e.f.g.h temporarily deferred due to user complaints - 188.8.131.52; see https://help.yahoo.com/kb/postmaster/SLN1234.html
to be counted as the same thing. The following should also be grouped as one type:
smtp;451 4.4.4 Temporary server error. Please try again later ATTR5 [HE1EUR02FT016.eop-EUR02.prod.protection.outlook.com]
smtp;451 4.4.4 Temporary server error. Please try again later ATTR5 [CWLGBR01FT018.eop-gbr01.prod.protection.outlook.com]
could someone please break this down for me so I can see how it might be achieved? I'm trying to use Group by Filters, but please tell me if this is not the best method for this.