![]() | stats min(_time) as _time values(Location) as Location sum(Layer) as PalletLayers sum(Tray) as TrayQty sum(CaseQty) as CaseQty sum(TrayError) as TrayError sum(Orientation) as OrientationError sum(Length) as LengthError sum(Width) as WidthError sum(Height) as HeightError sum(Protrusion) as ProtrusionError sum(OffCentre) as OffCentreError sum(Dimension) as Dimension sum(Mixed) as Mixed values(CaseTypeId) as CaseTypeId by OrderId | eval Layer=if(TrayLoad="PalletInPosition","1",null), CaseQty=if(TrayLoad="TrayLoad1" OR TrayLoad="TrayLoad2",Quantity,null), Tray=if(TrayLoad="TrayLoad1" OR TrayLoad="TrayLoad2","1",null) | eval ErrorQty=(OrientationError+ProtrusionError+DimensionError+OffCentreError), TrayError=(OrientationError+ProtrusionError+LengthError+WidthError+HeightError+OffCentreError), TrayError=if(TrayError>0,"1",null) | eval DimensionError=if(LengthError>0 OR WidthError>0 OR HeightError>0, "1","0") | rename as Error as TsuSuspectReason DepTsuEventContentMove.SenderFmInstanceName as Location DepTsuEventTrackingUpdate.TsuId as TsuId as Quantity DepTsuEventContentMove.LocationQualifiedName as TrayLoad as CaseTypeId | replace ProtrusionFront with Protrusion, ProtrusionBack with Protrusion, ProtrusionLeft with Protrusion, ProtrusionRight with Protrusion, ProtrusionTop with Protrusion ![]() Assuming _time and OrderId uniquely identify events in the search and summary index, try something like this index=ABC (sourcetype=DepTsuEventTrackingUpdate DepTsuEventTrackingUpdate.LocationQualifiedName=Tray* !=null AND !="TsuUnknownContent") OR (sourcetype=DepTsuEventContentMove)
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |