Adding a browsetime column - breach of 3 column rule ?
- July 26, 2017
- 0 replies
- 2336 views
Hello, I am having trouble adding a browsetime colum to my report (I have attached a screenshot).
This is exactly what I want but I just don't know how to add a browsetime column. Can anyone please help ?
Or would that then be a breach of the maximum limit of 3 columns in a drilldown dataset ?
This is the code for the attached screenshot:
select user_src, app, ebtr_value(ebtr_agg_flat(browsetime), null, $timespan) as browsetime from ###(select user_src, app, ebtr_agg_flat(browsetime) as browsetime from (select coalesce(nullifna(`user`), ipstr(`srcip`)) as user_src, coalesce(nullifna(hostname), ipstr(`dstip`)) as app, ebtr_agg_flat($browse_time) as browsetime from $log where $filter and $browse_time is not null and (appcat = 'Social.Media') group by user_src, app) t group by user_src, app order by ebtr_value(ebtr_agg_flat(browsetime), null, null) desc)### t group by user_src, app order by browsetime desc