Is your feature request related to a problem?
Current we only support pushdown the pattern of dedup N field1, field2... to aggregate. But cannot support pushdown the pattern of dedup N expr1, expr2... or | eval expr1 = ..., expr2 =... | dedup N expr1, expr2

What solution would you like?
Support pushdown dedup complex expression