PPL queries with single field responses result in: response should have 2 fields but found 1
for aggregations
#519
Labels
response should have 2 fields but found 1
for aggregations
#519
A PPl query like:
search source=[redacted] | stats dc(ContactId) as UniqueContactCount
Results in
This is expected to return a single field, it's a stat command.
Environment:
The text was updated successfully, but these errors were encountered: