topic Re: How do you reference a field value as a field to use in a table? in Splunk Search

How do you reference a field value as a field to use in a table?

michaelrosello — Thu, 27 Sep 2018 10:01:52 GMT

So I have a field day_Today=Friday

Now I want to use the value of day_Today as a field in my table

| table Date value(day_Today)

the result of this should be

| table Date Friday

Re: How do you reference a field value as a field to use in a table?

493669 — Thu, 27 Sep 2018 10:19:13 GMT

The table command generates a table with the field name mentioned displayed as a column name and their value in below subsequent rows..
so if you have Date and day_Today as field name and you want to display their values, then simply write as —

...| table Date day_Today

Note- field names are case sensitives

Re: How do you reference a field value as a field to use in a table?

michaelrosello — Thu, 27 Sep 2018 10:21:13 GMT

I want to use field value as column name.

Re: How do you reference a field value as a field to use in a table?

493669 — Thu, 27 Sep 2018 10:32:20 GMT

try xyseries command-
http://docs.splunk.com/Documentation/Splunk/7.1.3/SearchReference/Xyseries

| xyseries Date day_Today <fieldname which you want to show under day_Today>