<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How can I do calculations like Excel row data in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584329#M47906</link>
    <description>&lt;LI-CODE lang="markup"&gt;| transpose 0 header_field=name column_name=name
| eval C=(A*2)+B
| eval D=(A*2)+(B*2)
| transpose 0 header_field=name column_name=name&lt;/LI-CODE&gt;&lt;P&gt;Where name is the name of the first column&lt;/P&gt;</description>
    <pubDate>Wed, 09 Feb 2022 15:51:58 GMT</pubDate>
    <dc:creator>ITWhisperer</dc:creator>
    <dc:date>2022-02-09T15:51:58Z</dc:date>
    <item>
      <title>How to create search do calculations and make it like Excel row data?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584316#M47905</link>
      <description>&lt;PRE&gt;&lt;SPAN class=""&gt;&lt;SPAN&gt;Hi, all!&lt;/SPAN&gt;&lt;BR /&gt;I have a table &lt;/SPAN&gt;&lt;/PRE&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="FcwfCW76_0-1644419654330.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/17893i10606E549EDCC09C/image-size/medium?v=v2&amp;amp;px=400" role="button" title="FcwfCW76_0-1644419654330.png" alt="FcwfCW76_0-1644419654330.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;PRE&gt;&lt;SPAN class=""&gt;I want to be like this&lt;/SPAN&gt;&lt;/PRE&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="FcwfCW76_1-1644418803423.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/17892iFA728029B38C82C7/image-size/medium?v=v2&amp;amp;px=400" role="button" title="FcwfCW76_1-1644418803423.png" alt="FcwfCW76_1-1644418803423.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;PRE&gt;&lt;SPAN class=""&gt;How can I do this?&lt;BR /&gt;Can help me?&lt;/SPAN&gt;&lt;/PRE&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 10 Feb 2022 14:31:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584316#M47905</guid>
      <dc:creator>FcwfCW76</dc:creator>
      <dc:date>2022-02-10T14:31:20Z</dc:date>
    </item>
    <item>
      <title>Re: How can I do calculations like Excel row data</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584329#M47906</link>
      <description>&lt;LI-CODE lang="markup"&gt;| transpose 0 header_field=name column_name=name
| eval C=(A*2)+B
| eval D=(A*2)+(B*2)
| transpose 0 header_field=name column_name=name&lt;/LI-CODE&gt;&lt;P&gt;Where name is the name of the first column&lt;/P&gt;</description>
      <pubDate>Wed, 09 Feb 2022 15:51:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584329#M47906</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2022-02-09T15:51:58Z</dc:date>
    </item>
    <item>
      <title>Re: How can I do calculations like Excel row data</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584413#M47914</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168"&gt;@ITWhisperer&lt;/a&gt;&amp;nbsp;Thank you so much&amp;nbsp;&lt;/P&gt;&lt;P&gt;But the columns that is not a number is null, is it can to join at the same time?&lt;/P&gt;</description>
      <pubDate>Thu, 10 Feb 2022 01:16:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584413#M47914</guid>
      <dc:creator>FcwfCW76</dc:creator>
      <dc:date>2022-02-10T01:16:28Z</dc:date>
    </item>
    <item>
      <title>Re: How can I do calculations like Excel row data</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584451#M47915</link>
      <description>&lt;P&gt;Do you mean you don't have the first column of your table in splunk?&lt;/P&gt;&lt;P&gt;If so, you can add a field (column) to each row before the transpose&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| streamstats count as row
| eval row="row".row
| transpose 0 header_field=row column_name=row
| eval row3=(row1*2)+row2
| eval row4=(row1*2)+(row2*2)
| transpose 0 header_field=row column_name=row&lt;/LI-CODE&gt;</description>
      <pubDate>Thu, 10 Feb 2022 06:48:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584451#M47915</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2022-02-10T06:48:00Z</dc:date>
    </item>
    <item>
      <title>Re: How can I do calculations like Excel row data</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584485#M47916</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168"&gt;@ITWhisperer&lt;/a&gt;&amp;nbsp;Sorry I can't express clearly&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="858F23EB-E09D-459F-99A0-C3723C8CCBCB.png" style="width: 581px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/17927iBD7D951CF2EE6203/image-size/medium?v=v2&amp;amp;px=400" role="button" title="858F23EB-E09D-459F-99A0-C3723C8CCBCB.png" alt="858F23EB-E09D-459F-99A0-C3723C8CCBCB.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt; I want this&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="E262124E-1414-4073-B770-AB911631640C.png" style="width: 623px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/17928i0FFD3670308A9FA7/image-size/medium?v=v2&amp;amp;px=400" role="button" title="E262124E-1414-4073-B770-AB911631640C.png" alt="E262124E-1414-4073-B770-AB911631640C.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt; but now is this&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="E528A5A0-2D80-473D-B02D-5EAC3F76A178.png" style="width: 626px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/17929i6F36E7518AB23CF1/image-size/medium?v=v2&amp;amp;px=400" role="button" title="E528A5A0-2D80-473D-B02D-5EAC3F76A178.png" alt="E528A5A0-2D80-473D-B02D-5EAC3F76A178.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt; Thanks again for your help&lt;/P&gt;</description>
      <pubDate>Thu, 10 Feb 2022 09:06:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584485#M47916</guid>
      <dc:creator>FcwfCW76</dc:creator>
      <dc:date>2022-02-10T09:06:50Z</dc:date>
    </item>
    <item>
      <title>Re: How can I do calculations like Excel row data</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584500#M47917</link>
      <description>&lt;LI-CODE lang="markup"&gt;| makeresults
| eval _raw="A,1,2,3,4,HI,HELLO,OK
B,5,6,7,8,HI,HELLO,OK"
| multikv noheader=t
| rename Column_1 as name
| rename Column_2 as in
| rename Column_3 as out
| rename Column_4 as in1
| rename Column_5 as out1
| rename Column_6 as data1
| rename Column_7 as data2
| rename Column_8 as data3
| fields name in out in1 out1 data1 data2 data3
| fields - _raw _time
| transpose 0 header_field=name column_name=name
| eval C=if(isnum(A),(A*2)+B,A)
| eval D=if(isnum(A),(A*2)+(B*2),A)
| transpose 0 header_field=name column_name=name&lt;/LI-CODE&gt;</description>
      <pubDate>Thu, 10 Feb 2022 10:14:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584500#M47917</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2022-02-10T10:14:07Z</dc:date>
    </item>
    <item>
      <title>Re: How can I do calculations like Excel row data</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584629#M47926</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168"&gt;@ITWhisperer&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you so much&lt;/P&gt;&lt;P&gt;but I still have a lot of questions&lt;/P&gt;&lt;P&gt;Can you give me your contact information?&lt;/P&gt;</description>
      <pubDate>Fri, 11 Feb 2022 03:36:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584629#M47926</guid>
      <dc:creator>FcwfCW76</dc:creator>
      <dc:date>2022-02-11T03:36:59Z</dc:date>
    </item>
    <item>
      <title>Re: How can I do calculations like Excel row data</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584632#M47927</link>
      <description>&lt;P&gt;Thank you&lt;/P&gt;</description>
      <pubDate>Fri, 11 Feb 2022 04:59:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-search-do-calculations-and-make-it-like-Excel-row/m-p/584632#M47927</guid>
      <dc:creator>FcwfCW76</dc:creator>
      <dc:date>2022-02-11T04:59:28Z</dc:date>
    </item>
  </channel>
</rss>

