目前我正在解析@header 以获取标头中不同字符串的计数,例如
fields header.platform
| parse 'macOS' as mac
| parse 'Windows' as windows
| parse 'Android' as android
| parse 'iPhone' as iphone
| stats count(mac) as mac_count, count(windows) as windows_count, count(android) as
android_count, count(iphone) as iphone_count
by bin(1hr)
这样解析的时候能不能算出mac、windows、android和iphone的总计数?