<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Multiple queries on pivot report in Reporting</title>
    <link>https://community.splunk.com/t5/Reporting/Multiple-queries-on-pivot-report/m-p/537393#M8721</link>
    <description>&lt;P&gt;Hello,&amp;nbsp;&lt;/P&gt;&lt;P&gt;I have the following search string:&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;index = app_events_dbdetect_actimize_event_us_uat sourcetype = txndata | rangemap field=Time_taken_AIS_tomcat 0s-to-0.05s=0-50 0.05s-to-0.10s=51-100 0.10s-to-0.15s=101-150 0.15s-to-0.20s=151-200 0.20s-to-0.30s=201-300 0.30s-to-0.50s=301-500 0.50s-to-1s=501-1000 1s-to-2s=1001-2000 2s-to-3s=2001-3000 3s-to-5s=3001-5000 5s-to-30s=5001-30000 &amp;gt;30s=30001-99999&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;Which is passed to a pivot table as a dataset.&amp;nbsp;&lt;/P&gt;&lt;P&gt;The output is like this:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="pivot.JPG" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/12698iADBBBC7C29C4A8C6/image-size/large?v=v2&amp;amp;px=999" role="button" title="pivot.JPG" alt="pivot.JPG" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;Now, there are some things that I want to know:&amp;nbsp;&lt;/P&gt;&lt;P&gt;a) how can I sort the Column Values to be fraasdetppu1, fraasdetppu2, fraasdetppu10, fraasdetppu20...? It currently displays the information as fraasdetppu1, fraasdetppu10, fraasdetppu2, fraasdetppu21...&lt;/P&gt;&lt;P&gt;b) If the output has 0 values for 0s to 0.05s (for example), can I have it displayed here? I cannot seem to find where to get them displayed even if the "scored" items are 0 for the other ranges.&lt;/P&gt;&lt;P&gt;c) The grey line that has the totals shown for each server: can I add custom text under "scored" column?&lt;/P&gt;&lt;P&gt;d) Can a "Total" column be added right before the server names? It needs to sum up the count values of each server, for that specific "scoring" speed.&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you!&lt;/P&gt;</description>
    <pubDate>Wed, 27 Jan 2021 11:10:04 GMT</pubDate>
    <dc:creator>jugarugabi</dc:creator>
    <dc:date>2021-01-27T11:10:04Z</dc:date>
    <item>
      <title>Multiple queries on pivot report</title>
      <link>https://community.splunk.com/t5/Reporting/Multiple-queries-on-pivot-report/m-p/537393#M8721</link>
      <description>&lt;P&gt;Hello,&amp;nbsp;&lt;/P&gt;&lt;P&gt;I have the following search string:&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;index = app_events_dbdetect_actimize_event_us_uat sourcetype = txndata | rangemap field=Time_taken_AIS_tomcat 0s-to-0.05s=0-50 0.05s-to-0.10s=51-100 0.10s-to-0.15s=101-150 0.15s-to-0.20s=151-200 0.20s-to-0.30s=201-300 0.30s-to-0.50s=301-500 0.50s-to-1s=501-1000 1s-to-2s=1001-2000 2s-to-3s=2001-3000 3s-to-5s=3001-5000 5s-to-30s=5001-30000 &amp;gt;30s=30001-99999&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;Which is passed to a pivot table as a dataset.&amp;nbsp;&lt;/P&gt;&lt;P&gt;The output is like this:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="pivot.JPG" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/12698iADBBBC7C29C4A8C6/image-size/large?v=v2&amp;amp;px=999" role="button" title="pivot.JPG" alt="pivot.JPG" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;Now, there are some things that I want to know:&amp;nbsp;&lt;/P&gt;&lt;P&gt;a) how can I sort the Column Values to be fraasdetppu1, fraasdetppu2, fraasdetppu10, fraasdetppu20...? It currently displays the information as fraasdetppu1, fraasdetppu10, fraasdetppu2, fraasdetppu21...&lt;/P&gt;&lt;P&gt;b) If the output has 0 values for 0s to 0.05s (for example), can I have it displayed here? I cannot seem to find where to get them displayed even if the "scored" items are 0 for the other ranges.&lt;/P&gt;&lt;P&gt;c) The grey line that has the totals shown for each server: can I add custom text under "scored" column?&lt;/P&gt;&lt;P&gt;d) Can a "Total" column be added right before the server names? It needs to sum up the count values of each server, for that specific "scoring" speed.&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you!&lt;/P&gt;</description>
      <pubDate>Wed, 27 Jan 2021 11:10:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/Multiple-queries-on-pivot-report/m-p/537393#M8721</guid>
      <dc:creator>jugarugabi</dc:creator>
      <dc:date>2021-01-27T11:10:04Z</dc:date>
    </item>
    <item>
      <title>Re: Multiple queries on pivot report</title>
      <link>https://community.splunk.com/t5/Reporting/Multiple-queries-on-pivot-report/m-p/537483#M8726</link>
      <description>&lt;P&gt;Tried with the search query:&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;index = app_events_dbdetect_actimize_event_us_uat sourcetype = txndata | rangemap field=Time_taken_AIS_tomcat 0s-to-0.05s=0-50 0.05s-to-0.10s=51-100 0.10s-to-0.15s=101-150 0.15s-to-0.20s=151-200 0.20s-to-0.30s=201-300 0.30s-to-0.50s=301-500 0.50s-to-1s=501-1000 1s-to-2s=1001-2000 2s-to-3s=2001-3000 3s-to-5s=3001-5000 5s-to-30s=5001-30000 &amp;gt;30s=30001-99999 | fillnull range value=NULL&lt;/LI-CODE&gt;&lt;P&gt;&lt;SPAN&gt;but this didn't helped either.&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 27 Jan 2021 19:02:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/Multiple-queries-on-pivot-report/m-p/537483#M8726</guid>
      <dc:creator>jugarugabi</dc:creator>
      <dc:date>2021-01-27T19:02:22Z</dc:date>
    </item>
  </channel>
</rss>

