Best Practice: Add additional fields to groupBy() results

The correct way to collect multiple fields is by using an array:

groupBy([ComputerName, FileName], function=collect([DomainName, MD5HashData, SHA256HashData]))

The collect() function accepts a list of fields,and LogScale will add the value of each of these to each event. This is required because the groupBy() function aggregates and summarizes the information, removing these fields in the process.

This is the result: