filtering the same starting value multiple times

Question

hi i'm using logs insight to make aquery and i'm trying to filter the system filed @message multiple times, with the intention of filter the same starting value every time, i tried to make 3 separate values using fields and then filter each one of them, but when i filter one of then the other 2 get affected by the same filter as well, this is the query:

fields @logStream as stream, @message as ms1, @message as ms2, @message as ms3
| filter stream like /qt-/
| filter ms1 like /Message not yet played/
| filter ms2 like /INFO: Processing event message/
| filter ms3 like /Message already played/
| stats count(ms3) as n_messages by stream

Answer 1

Try to separate the filtering process for each alias by using the fields and filtering clauses independently.

fields @logStream as stream, 
       @message as ms1, 
       @message as ms2, 
       @message as ms3
| filter stream like /qt-/
| fields @logStream as stream, 
         @message as ms1
| filter ms1 like /Message not yet played/
| fields @logStream as stream, 
         @message as ms2
| filter ms2 like /INFO: Processing event message/
| fields @logStream as stream, 
         @message as ms3
| filter ms3 like /Message already played/
| stats count(ms3) as n_messages by stream