Correct, expected behavior for some queries:
row x = 1 | eval y = [1,2,3] | stats count(y), count([1,2,3]) by x
count(y) |count([1,2,3]) | x
---------------+---------------+---------------
3 |3 |1
For others, it seems like count([1,2,3]) is treated as count(*):
row x = 1 | stats count([1,2,3]) by x
count([1,2,3]) | x
---------------+---------------
1 |1
The behavior is the same for the two queries, resp., if we use from some_idx instead of row.
Correct, expected behavior for some queries:
For others, it seems like
count([1,2,3])is treated ascount(*):The behavior is the same for the two queries, resp., if we use
from some_idxinstead ofrow.