<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to transpose 2nd column in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-transpose-2nd-column/m-p/500451#M33299</link>
    <description>&lt;P&gt;Replace your stats command with this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| chart count over stn by stn_state
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;&lt;EM&gt;Note:  I couldn't tell whether the correct field name is "stn_state" or "stn_status" since you use both in your question.  Use the correct field name in this chart command, and you should get the results you want.&lt;/EM&gt;&lt;/P&gt;

&lt;P&gt;Hope that helps!&lt;BR /&gt;
rmmiller&lt;/P&gt;</description>
    <pubDate>Wed, 30 Sep 2020 04:43:10 GMT</pubDate>
    <dc:creator>rmmiller</dc:creator>
    <dc:date>2020-09-30T04:43:10Z</dc:date>
    <item>
      <title>How to transpose 2nd column</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-transpose-2nd-column/m-p/500450#M33298</link>
      <description>&lt;P&gt;I have query as shown below,&lt;/P&gt;

&lt;P&gt;|stats count by stn stn_status&lt;/P&gt;

&lt;P&gt;result:&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;stn                           stn_state                                count&lt;/STRONG&gt;&lt;BR /&gt;
stn_1                       completed                               20&lt;BR /&gt;
stn_1                       In progress                               2&lt;BR /&gt;
stn_1                       failed                                         8&lt;BR /&gt;
stn_2                       completed                                30&lt;BR /&gt;
stn_3                       completed                                10&lt;BR /&gt;
stn_3                       failed                                         10&lt;/P&gt;

&lt;P&gt;expected results:&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;Stn                       completed                      In progress     failed&lt;/STRONG&gt;&lt;BR /&gt;&lt;BR /&gt;
stn_1                         20                                        2                      8&lt;BR /&gt;
stn_2                          30&lt;BR /&gt;
stn_3                          10                                                                10&lt;/P&gt;

&lt;P&gt;Help me on this, Thanks in Advance.&lt;/P&gt;</description>
      <pubDate>Wed, 30 Sep 2020 04:42:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-transpose-2nd-column/m-p/500450#M33298</guid>
      <dc:creator>james_n</dc:creator>
      <dc:date>2020-09-30T04:42:46Z</dc:date>
    </item>
    <item>
      <title>Re: How to transpose 2nd column</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-transpose-2nd-column/m-p/500451#M33299</link>
      <description>&lt;P&gt;Replace your stats command with this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| chart count over stn by stn_state
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;&lt;EM&gt;Note:  I couldn't tell whether the correct field name is "stn_state" or "stn_status" since you use both in your question.  Use the correct field name in this chart command, and you should get the results you want.&lt;/EM&gt;&lt;/P&gt;

&lt;P&gt;Hope that helps!&lt;BR /&gt;
rmmiller&lt;/P&gt;</description>
      <pubDate>Wed, 30 Sep 2020 04:43:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-transpose-2nd-column/m-p/500451#M33299</guid>
      <dc:creator>rmmiller</dc:creator>
      <dc:date>2020-09-30T04:43:10Z</dc:date>
    </item>
    <item>
      <title>Re: How to transpose 2nd column</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-transpose-2nd-column/m-p/500452#M33300</link>
      <description>&lt;P&gt;Simply change &lt;CODE&gt;stats&lt;/CODE&gt; to &lt;CODE&gt;chart&lt;/CODE&gt;; no other changes are necessary.&lt;/P&gt;</description>
      <pubDate>Thu, 26 Mar 2020 16:25:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-transpose-2nd-column/m-p/500452#M33300</guid>
      <dc:creator>woodcock</dc:creator>
      <dc:date>2020-03-26T16:25:56Z</dc:date>
    </item>
    <item>
      <title>Re: How to transpose 2nd column</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-transpose-2nd-column/m-p/500453#M33301</link>
      <description>&lt;P&gt;It Works, Thank you very much.&lt;/P&gt;</description>
      <pubDate>Fri, 27 Mar 2020 05:17:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-transpose-2nd-column/m-p/500453#M33301</guid>
      <dc:creator>james_n</dc:creator>
      <dc:date>2020-03-27T05:17:05Z</dc:date>
    </item>
  </channel>
</rss>

