topic Re: How to Convert row values to column name with corresponding values. in Splunk Enterprise

How to Convert row values to column name with corresponding values.

abhishekpatel2 — Mon, 08 Mar 2021 05:26:53 GMT

My base search provides me this result:

Column_1 Column_2

---------------------------

Val1

A Val2

Val3

---------------------------

Val4

B Val5

Val6

Val7

---------------------------

I want to transform value of Column 2 over Column 1.

Output should be:-

A | B

Val1 | Val4

Val2 | Val5

Val3 | Val6

| Val7

I have tried chart values(column_2) by column_1. No luck in that.

Re: How to Convert row values to column name with corresponding values.

manjunathmeti — Mon, 08 Mar 2021 06:36:20 GMT

hi @abhishekpatel2,

Assuming Column_2 is a multivalued field, you can try this query:

base_search | mvexpand Column_2 | eval new=mvzip(Column_1, Column_2) | xyseries new, Column_1, Column_2 | fields - new

If this reply helps you, an upvote/like would be appreciated.

Re: How to Convert row values to column name with corresponding values.

abhishekpatel2 — Mon, 08 Mar 2021 06:42:07 GMT

But it is giving only the single values for column_2 I want all the corresponding values of column_2 for that column_1(Duplication of values of column_2 is allowed)

Re: How to Convert row values to column name with corresponding values.

manjunathmeti — Mon, 08 Mar 2021 07:18:26 GMT

Try this:

If this reply helps you, an upvote/like would be appreciated.

Re: How to Convert row values to column name with corresponding values.

abhishekpatel2 — Mon, 08 Mar 2021 08:03:34 GMT

It is not giving any output statistics.(What needs to be added after streamstats count or keep as it is?)

Re: How to Convert row values to column name with corresponding values.

abhishekpatel2 — Mon, 08 Mar 2021 08:05:12 GMT

Re: How to Convert row values to column name with corresponding values.

manjunathmeti — Mon, 08 Mar 2021 08:36:39 GMT

The field's name is wrong in line number 7. And remove line numbers 3 and 4, these are not required.

Re: How to Convert row values to column name with corresponding values.

abhishekpatel2 — Mon, 08 Mar 2021 10:30:23 GMT

xcjhjcxb j

Re: How to Convert row values to column name with corresponding values.

abhishekpatel2 — Mon, 08 Mar 2021 10:32:53 GMT

I get this blank cells under the values for column_1.I need the continuos output or I can say tabular matrix with each cell having values under column_1 no blank cell until no new values found. Can you please help me with this...

Re: How to Convert row values to column name with corresponding values.

ITWhisperer — Mon, 08 Mar 2021 10:48:57 GMT

| transpose 0 header_field=Column_1 | where column="Column_2" | fields - column

Re: How to Convert row values to column name with corresponding values.

manjunathmeti — Tue, 09 Mar 2021 09:44:31 GMT

Post some input data and output you are expecting.