topic Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel? in Reporting

Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

Splunk2016 — Wed, 15 Apr 2015 19:00:10 GMT

I am familiar with Pivot tables under Microsoft Excel and would like to recreate Pivot tables in Splunk, but don't know where to begin.
Splunk requires data models, but how does a data model match my input file and why does Splunk
needs it to create a Pivot Table?
I see only two sample data models under Pivot. How can I add data models? Does Pivot work like in Excel?
I would appreciate any help. Thanks!

Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

ChrisG — Wed, 15 Apr 2015 20:09:18 GMT

There is a short Pivot Manual that covers the basic concepts and procedures about how Pivot works in Splunk Enterprise.

I also recommend the Pivot Tutorial, which has a walkthrough with a sample data set.

Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

Splunk2016 — Wed, 15 Apr 2015 20:37:02 GMT

I have seen the pivot manual but how can you go about it if the Buttercup Games Sales data model does not exist? There are only two audit data models: Internal Audit Logs and Internal Server Logs Samples.
Thanks!

Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

ChrisG — Wed, 15 Apr 2015 20:38:50 GMT

The Pivot Tutorial walks through loading the Buttercup Games sample data and creating the data model.

Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

Splunk2016 — Wed, 15 Apr 2015 20:44:56 GMT

Is there a step by step example or video in creating just Data Model than the reference to Data Model and Pivot Tutorial? The reference seems to be written for an advance Splunk user. We need the Data Model 101 course. Thanks!

Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

ChrisG — Wed, 15 Apr 2015 20:49:52 GMT

There is a Pivot video I found: https://www.youtube.com/watch?v=MdjDrDTXYWQ.

The tutorial is pretty straightforward, though: it walks you through downloading the sample data, getting it in, and creating the data model. The only extra complexity is that it includes a lookup table to enrich the data.

Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

Splunk2016 — Wed, 15 Apr 2015 21:21:15 GMT

I am stuck on Add lookup attributes from lookup tables but the prices_lookup under Add Attributes with a Lookup is missing and only shows the dnslookup. Did I miss a step?

Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

ChrisG — Mon, 28 Sep 2020 19:32:25 GMT

Did you define the price_lookup attribute in the previous step? http://docs.splunk.com/Documentation/Splunk/6.2.2/PivotTutorial/AddlookupfilestoSplunk#Add_the_field_lookup_definition.

Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

Splunk2016 — Wed, 15 Apr 2015 21:26:24 GMT

I tried but I don't know where the prices.csv resides. It is not in the tutorialdata.zip file downloaded in the first step. Ok I found finally found it. I missed a step. Thanks!

Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

ChrisG — Wed, 15 Apr 2015 21:30:59 GMT

The download location is mentioned at the top of http://docs.splunk.com/Documentation/Splunk/6.2.2/PivotTutorial/AddlookupfilestoSplunk. It is: http://docs.splunk.com/images/d/db/Prices.csv.zip.

Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

Splunk2016 — Wed, 15 Apr 2015 21:41:21 GMT

I used the unzipped prices.csv instead of prices.csv.zip by tutorial instructions. Thanks!

Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

Splunk2016 — Wed, 15 Apr 2015 21:59:42 GMT

Even though I am not done with the whole tutorial, I want to thank you for your answers! I think it would help if the tutorial would come with a cheatsheet. Thanks again Chris for your patience!