<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic unit along with fieldname in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/unit-along-with-fieldname/m-p/48662#M11614</link>
    <description>&lt;P&gt;Hi all&lt;BR /&gt;
is there any option in splunk, so that we can list the table contents and their units along with the table name (such as seconds,percentage,hours) etc....&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;field1 time(secs)
blabla 1111
bla    2222
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;in other table instead of secs it will be percentage.. something similar to this&lt;BR /&gt;
please help&lt;BR /&gt;
thank you&lt;/P&gt;</description>
    <pubDate>Thu, 29 Nov 2012 09:15:30 GMT</pubDate>
    <dc:creator>smolcj</dc:creator>
    <dc:date>2012-11-29T09:15:30Z</dc:date>
    <item>
      <title>unit along with fieldname</title>
      <link>https://community.splunk.com/t5/Splunk-Search/unit-along-with-fieldname/m-p/48662#M11614</link>
      <description>&lt;P&gt;Hi all&lt;BR /&gt;
is there any option in splunk, so that we can list the table contents and their units along with the table name (such as seconds,percentage,hours) etc....&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;field1 time(secs)
blabla 1111
bla    2222
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;in other table instead of secs it will be percentage.. something similar to this&lt;BR /&gt;
please help&lt;BR /&gt;
thank you&lt;/P&gt;</description>
      <pubDate>Thu, 29 Nov 2012 09:15:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/unit-along-with-fieldname/m-p/48662#M11614</guid>
      <dc:creator>smolcj</dc:creator>
      <dc:date>2012-11-29T09:15:30Z</dc:date>
    </item>
    <item>
      <title>Re: unit along with fieldname</title>
      <link>https://community.splunk.com/t5/Splunk-Search/unit-along-with-fieldname/m-p/48663#M11615</link>
      <description>&lt;P&gt;Do you have a before/after example of what you want to change?&lt;/P&gt;</description>
      <pubDate>Thu, 29 Nov 2012 10:47:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/unit-along-with-fieldname/m-p/48663#M11615</guid>
      <dc:creator>martin_mueller</dc:creator>
      <dc:date>2012-11-29T10:47:05Z</dc:date>
    </item>
    <item>
      <title>Re: unit along with fieldname</title>
      <link>https://community.splunk.com/t5/Splunk-Search/unit-along-with-fieldname/m-p/48664#M11616</link>
      <description>&lt;P&gt;edited mu question with some more info,, please go through and help me&lt;/P&gt;</description>
      <pubDate>Thu, 29 Nov 2012 11:03:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/unit-along-with-fieldname/m-p/48664#M11616</guid>
      <dc:creator>smolcj</dc:creator>
      <dc:date>2012-11-29T11:03:03Z</dc:date>
    </item>
    <item>
      <title>Re: unit along with fieldname</title>
      <link>https://community.splunk.com/t5/Splunk-Search/unit-along-with-fieldname/m-p/48665#M11617</link>
      <description>&lt;P&gt;Rename should do the job:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;search... | table... | rename field as time(secs)
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Thu, 29 Nov 2012 11:10:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/unit-along-with-fieldname/m-p/48665#M11617</guid>
      <dc:creator>martin_mueller</dc:creator>
      <dc:date>2012-11-29T11:10:09Z</dc:date>
    </item>
  </channel>
</rss>

