DQL function replacing splunk command stats list

[susmita_k]

is there a DQL Command/function available which can replace the stats list command in splunk ? Thanks in advance

[angelalanis · Accepted solution]

Hi, the stats command in Splunk is an aggregation command, in Dynatrace with DQL there are 3 aggregation commands.

Looking at this example in the Splunk documentation, I think something similar can be made using the summarize command with DQL.

I tried making this example in a Notebook, here are the results.

fetch logs
| filter matchesPhrase(content, "long transaction")
| parse content, """LD 'type ['LD:type']'"""
| parse content, """LD 'duration ['INT:duration']'"""
| summarize {count(), sum(duration), avg(duration), max(duration), min(duration)}, by:{type} 

Let me know if you find this useful.