Couple custom field creation questions

[qyost]

I have two values I would like to display in a table widget, but I can't seem to find the right way to craft the custom field.  For both, I'm trying to extract a single value across mutliple individual alerts.

1) I can easily get the number of users matching the criteria for the record, but I would prefer to display a list of the users. How can this be done without presenting a row for each user? I would much prefer to have them summarized into a single cell.

2) The second summary field I would like to create is the "most recent" time across the individual records.

Table I'm working with

Any recommendations would be appreciated.

[Aaron_Zhang · Accepted solution]

Hi @qyost ! Here are my recommendations:

1) To have users summarized into a single cell, you can use the "Aggregate" feature to get a "List of unique values" from the "User" field.

2) To get the "most recent" time, you can apply the "Maximum Event Date" field. This will give you the "most recent" date across the individual events. 

Let me know if you have any questions!

[Aaron_Zhang · Accepted solution]

Hi @qyost ! Here are my recommendations:

1) To have users summarized into a single cell, you can use the "Aggregate" feature to get a "List of unique values" from the "User" field.

2) To get the "most recent" time, you can apply the "Maximum Event Date" field. This will give you the "most recent" date across the individual events. 

Let me know if you have any questions!

[qyost]

That did largely work so I've accepted it as a solution.   Not sure how I overlooked both of those option. 

One challenge though, I was looking for a more granular timestamp than date for the most recent.  It's also peculiar that maximum date displays a time since the description is date only.

[Aaron_Zhang]

Thanks for the feedback!

Advanced Analytics currently only support "date" for the "most recent," but we should be able to enable a more granular "timestamp" for this with custom fields or enhancement requests. Feel free to reach out to your account team for more details.

I will also work with our teams to modify the existing "maximum date" field. Thanks again for your comments!

Best,

Aaron

[qyost]

Enhancement Request in in-flight.

[danielaflorez · Accepted solution]

Created ER-2763.