topic How to turn values into their own field? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-turn-values-into-their-own-field/m-p/445237#M77491 <P>Hi. I'd like to grab unique values of a field, and turn them into their own field. And then, to put their corresponding <CODE>deviceID</CODE> under them. Please see the example.csv:</P> <PRE><CODE>classification deviceID alpha bravo 1001 alpha bravo 1002 alpha bravo 2002 bravo 5500 bravo 6600 bravo 0077 alpha 1114 alpha 3334 </CODE></PRE> <P>How do I create a query to show this CSV manipulated like the below?:</P> <PRE><CODE>alpha bravo bravo alpha 1001 5500 1114 1002 6600 3334 2002 0077 </CODE></PRE> Tue, 13 Aug 2019 15:07:01 GMT russell120 2019-08-13T15:07:01Z How to turn values into their own field? https://community.splunk.com/t5/Getting-Data-In/How-to-turn-values-into-their-own-field/m-p/445237#M77491 <P>Hi. I'd like to grab unique values of a field, and turn them into their own field. And then, to put their corresponding <CODE>deviceID</CODE> under them. Please see the example.csv:</P> <PRE><CODE>classification deviceID alpha bravo 1001 alpha bravo 1002 alpha bravo 2002 bravo 5500 bravo 6600 bravo 0077 alpha 1114 alpha 3334 </CODE></PRE> <P>How do I create a query to show this CSV manipulated like the below?:</P> <PRE><CODE>alpha bravo bravo alpha 1001 5500 1114 1002 6600 3334 2002 0077 </CODE></PRE> Tue, 13 Aug 2019 15:07:01 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-turn-values-into-their-own-field/m-p/445237#M77491 russell120 2019-08-13T15:07:01Z Re: How to turn values into their own field? https://community.splunk.com/t5/Getting-Data-In/How-to-turn-values-into-their-own-field/m-p/445238#M77492 <P>Give this a try</P> <PRE><CODE>your current search giving fields classification,deviceID | streamstats count as temp by classification | xyseries temp classification deviceID | fields - temp </CODE></PRE> Tue, 13 Aug 2019 15:22:25 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-turn-values-into-their-own-field/m-p/445238#M77492 somesoni2 2019-08-13T15:22:25Z Re: How to turn values into their own field? https://community.splunk.com/t5/Getting-Data-In/How-to-turn-values-into-their-own-field/m-p/445239#M77493 <P>Works perfectly. Thanks bro.</P> Tue, 13 Aug 2019 15:44:01 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-turn-values-into-their-own-field/m-p/445239#M77493 russell120 2019-08-13T15:44:01Z