Cacher is the code snippet organizer for pro developers

sourcetype="efs-device-analytics" source=ASE  "component_attributes.App_Version"="6.0.46.11"  product_name="AutodeskDesktopApp"
"component_attributes.Event_Name"="Wingman_Launched"
| dedup component_attributes.Device_ID sortby +_time
| eval month_day=strftime(_time,"%4Y/%2m/%2d")
| stats dc(component_attributes.Device_ID) as user_count by month_day