We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Up
You can use the "| dedup " filter.
For example, to get the unique message_ids in a list of logs with NullReferenceException in the @message field:
fields message_id, @message | filter @message LIKE /NullReferenceException/ | sort @timestamp asc | dedup message_id