https://community.splunk.com/t5/Reporting/Can-I-use-pivot-without-search-processing-language/m-p/340412#M6035 <P>Can pivot work without search processing languages? It will work only with the data models/data sets like that. Can anyone clarify this, please?</P> Sat, 16 Sep 2017 09:41:40 GMT darshyakmk 2017-09-16T09:41:40Z https://community.splunk.com/t5/Reporting/Can-I-use-pivot-without-search-processing-language/m-p/340412#M6035 <P>Can pivot work without search processing languages? It will work only with the data models/data sets like that. Can anyone clarify this, please?</P> Sat, 16 Sep 2017 09:41:40 GMT https://community.splunk.com/t5/Reporting/Can-I-use-pivot-without-search-processing-language/m-p/340412#M6035 darshyakmk 2017-09-16T09:41:40Z https://community.splunk.com/t5/Reporting/Can-I-use-pivot-without-search-processing-language/m-p/340413#M6036 <P>The answer is both yes and no if you ask me... pivot requires a datamodel and a datamodel requires a root search or event... something like 'index=yourIndex error'. Or in its simplest form 'index=yourIndex"...</P> <P>Technically that root search is SPL.</P> <P>Also, once the root search is configured, additional SPL can be used to extract fields, inputlookups, etc ALL WITHIN the datamodel.</P> <P>So typically someone who understands SPL will create the datamodel. Once the datamodel is created, the pivot functionality in Splunk doesn't require additional SPL. You simply go to /pivot in the UI (<A href="https://Splunk:8000/en-US/appName/pivot">https://Splunk:8000/en-US/appName/pivot</A> OR click on data models or data sets), open the appropriate datamodel and select options from drop down menus.</P> <P>Of course there is a SPL command called pivot as well...</P> Sat, 16 Sep 2017 12:11:39 GMT https://community.splunk.com/t5/Reporting/Can-I-use-pivot-without-search-processing-language/m-p/340413#M6036 jkat54 2017-09-16T12:11:39Z https://community.splunk.com/t5/Reporting/Can-I-use-pivot-without-search-processing-language/m-p/340414#M6037 <P>Hey @darshyakmk, if @jkat54 answered your question please "Accept" the answer to close the question and to award karma points to jkat54 <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Mon, 18 Sep 2017 17:58:22 GMT https://community.splunk.com/t5/Reporting/Can-I-use-pivot-without-search-processing-language/m-p/340414#M6037 lfedak_splunk 2017-09-18T17:58:22Z