https://community.splunk.com/t5/Knowledge-Management/How-to-Transpose-Group-of-Columns-in-Rows/m-p/607120#M8951 <P>Hi <a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp;</P><P>Thanks for this perfect&nbsp; solution !!</P> Wed, 27 Jul 2022 06:14:23 GMT mxh7777 2022-07-27T06:14:23Z https://community.splunk.com/t5/Knowledge-Management/How-to-Transpose-Group-of-Columns-in-Rows/m-p/607041#M8949 <P>Hello,<BR />I'd like to transpose a table results by grouping by columns.</P> <P>Here is my table</P> <TABLE border="1" width="100%"> <TBODY> <TR> <TD width="16.666666666666668%">time1</TD> <TD width="16.666666666666668%">event1</TD> <TD width="16.666666666666668%">time2</TD> <TD width="16.666666666666668%">event2</TD> <TD width="16.666666666666668%">time3</TD> <TD width="16.666666666666668%">event3</TD> </TR> <TR> <TD width="16.666666666666668%">01/01/2022</TD> <TD width="16.666666666666668%">titi</TD> <TD width="16.666666666666668%">02/01/2022</TD> <TD width="16.666666666666668%">toto</TD> <TD width="16.666666666666668%">04/01/2022</TD> <TD width="16.666666666666668%">tata</TD> </TR> </TBODY> </TABLE> <P>&nbsp;</P> <P>I'd like to transpose this structure in this way</P> <TABLE border="1" width="100%"> <TBODY> <TR> <TD width="50%" height="25px">time</TD> <TD width="50%" height="25px">content</TD> </TR> <TR> <TD width="50%" height="25px">01/01/2022</TD> <TD width="50%" height="25px">titi</TD> </TR> <TR> <TD width="50%" height="25px">02/01/2022</TD> <TD width="50%" height="25px">toto</TD> </TR> <TR> <TD width="50%" height="25px">04/01/2022</TD> <TD width="50%" height="25px">tata</TD> </TR> </TBODY> </TABLE> <P>&nbsp;</P> <P>I didn't find a way to solve this</P> <P>Thans in advance</P> Tue, 26 Jul 2022 14:44:56 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-Transpose-Group-of-Columns-in-Rows/m-p/607041#M8949 mxh7777 2022-07-26T14:44:56Z https://community.splunk.com/t5/Knowledge-Management/How-to-Transpose-Group-of-Columns-in-Rows/m-p/607049#M8950 <P>One way might be something like this</P><LI-CODE lang="markup">| eval row=mvrange(1,4) | mvexpand row | foreach event* [| eval content=if(row=&lt;&lt;MATCHSEG1&gt;&gt;,&lt;&lt;FIELD&gt;&gt;,content)] | foreach time* [| eval time=if(row=&lt;&lt;MATCHSEG1&gt;&gt;,&lt;&lt;FIELD&gt;&gt;,time)] | table time content</LI-CODE> Tue, 26 Jul 2022 14:42:46 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-Transpose-Group-of-Columns-in-Rows/m-p/607049#M8950 ITWhisperer 2022-07-26T14:42:46Z https://community.splunk.com/t5/Knowledge-Management/How-to-Transpose-Group-of-Columns-in-Rows/m-p/607120#M8951 <P>Hi <a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp;</P><P>Thanks for this perfect&nbsp; solution !!</P> Wed, 27 Jul 2022 06:14:23 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-Transpose-Group-of-Columns-in-Rows/m-p/607120#M8951 mxh7777 2022-07-27T06:14:23Z