topic How to get the column result into row wise for multivalue events? in Dashboards & Visualizations https://community.splunk.com/t5/Dashboards-Visualizations/How-to-get-the-column-result-into-row-wise-for-multivalue-events/m-p/326597#M21128 <P>Hi Everyone,</P> <P>I have multivalues in the events, As per the Screenshot below, How can I get the DiskGB value in row Instead of Column. Expect output show in the Below Screenshot. Can someone please help me with the query. </P> <P>Thank you in Advance. <BR /> <span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/4490i83B1CDBA70290523/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Thu, 01 Mar 2018 18:09:38 GMT VsplunkV 2018-03-01T18:09:38Z How to get the column result into row wise for multivalue events? https://community.splunk.com/t5/Dashboards-Visualizations/How-to-get-the-column-result-into-row-wise-for-multivalue-events/m-p/326597#M21128 <P>Hi Everyone,</P> <P>I have multivalues in the events, As per the Screenshot below, How can I get the DiskGB value in row Instead of Column. Expect output show in the Below Screenshot. Can someone please help me with the query. </P> <P>Thank you in Advance. <BR /> <span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/4490i83B1CDBA70290523/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Thu, 01 Mar 2018 18:09:38 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-get-the-column-result-into-row-wise-for-multivalue-events/m-p/326597#M21128 VsplunkV 2018-03-01T18:09:38Z Re: How to get the column result into row wise for multivalue events? https://community.splunk.com/t5/Dashboards-Visualizations/How-to-get-the-column-result-into-row-wise-for-multivalue-events/m-p/326598#M21129 <P>If you search is like this (last command being stats, aggregate function for Memory can be different)</P> <PRE><CODE>your base search | ... other code... | stats max(Memory) as Memory values(DiskGB) as DiskGB by Service </CODE></PRE> <P>Then try like this</P> <PRE><CODE>your base search | ... other code... | stats max(Memory) as Memory values(DiskGB) as DiskGB by Service delim="," | nomv DiskGB </CODE></PRE> Thu, 01 Mar 2018 19:44:27 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-get-the-column-result-into-row-wise-for-multivalue-events/m-p/326598#M21129 somesoni2 2018-03-01T19:44:27Z