I have a dataset:
IP,web,rule
12.54.5435,web1,rule1
12.54.5435,web1,rule1
12.54.5435,web2,rule1
12.54.5435,web1,rule2
13.54.5435,web1,rule1
13.54.5435,web1,rule1
13.54.5435,web1,rule1
13.54.5435,web1,rule2
For every ip, i need to create a single record that looks like
total_count,ip, webrulecountlist
4,12.54.5435, ['web1,rule1, 2', 'web2,rule1,1', 'web1,rule2,1']
4,13.54.5435, ['web1, rule1, 3', 'web1, rule2, 1']
My inner query looks like this:
select count(ip) as c, ip, webacl, rule from t1 group by ip, webacl, rule
above query output is:
2,12.54.5435,web1,rulw1
1,12.54.5435,web1,rulw2
1,12.54.5435,web2,rulw1
3,13.54.5435,web1,rulw1
1,13.54.5435,web1,rulw2
but how can i now group by ip combining column values