topic how to add columns having Alphabetically/string data and display the count? in Monitoring Splunk

how to add columns having Alphabetically/string data and display the count?

Ashwini008 — Mon, 23 Aug 2021 13:40:30 GMT

Hi,

I have below data in lookup,i need to add up the row data

example: For first row i need to add total offw,total 'B',total 'V' and show the count in 3 different column for OFF,B and V.

Similary for each row i need add the same data value and show in a column

any query or commands ?

Re: how to add columns having Alphabetically/string data and display the count?

ITWhisperer — Mon, 23 Aug 2021 14:28:43 GMT

Assuming you can't get to the data before it has been put in this format, you could try untable to reverse the xyseries, then count the various values by whatever that first column is.

Re: how to add columns having Alphabetically/string data and display the count?

Ashwini008 — Tue, 24 Aug 2021 11:46:45 GMT

@ITWhisperer Thank You.I got it in below format using the untable command.

How can i get in the below format.

Names	A	B	C
XYZ	11	4	7

Re: how to add columns having Alphabetically/string data and display the count?

ITWhisperer — Tue, 24 Aug 2021 12:56:46 GMT

| rename count(FieldValue) as count | table Names FieldValue count | xyseries Names FieldValue count