topic Re: How do you transform table values to a column replaced by values? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-do-you-transform-table-values-to-a-column-replaced-by-values/m-p/417917#M120215 <P>Excellent, this did the job!<BR /> Many Thanks, Martin</P> Wed, 23 Jan 2019 07:27:53 GMT mgutschelhofer 2019-01-23T07:27:53Z How do you transform table values to a column replaced by values? https://community.splunk.com/t5/Splunk-Search/How-do-you-transform-table-values-to-a-column-replaced-by-values/m-p/417915#M120213 <P>Hi Folks,</P> <P>I'm still new to Splunk queries. I'm struggling with the following (simple) table transformation:</P> <UL> <LI>All values from a column should be added as a new column</LI> <LI>Values for this new column should be taken from a specific column</LI> </UL> <P>Best to show as example. Here is my input:</P> <PRE><CODE>status stage count -------------------- FAIL dev 12 OK dev 14 FAIL prod 13 OK prod 34 FAIL prev 78 OK prev 23 </CODE></PRE> <P>Which I would like to transform to this:</P> <PRE><CODE>stage OK FAIL ----------------- dev 14 12 prev 23 78 prod 34 13 </CODE></PRE> <P>Help appreciated &amp; Thanks!</P> Tue, 22 Jan 2019 20:36:55 GMT https://community.splunk.com/t5/Splunk-Search/How-do-you-transform-table-values-to-a-column-replaced-by-values/m-p/417915#M120213 mgutschelhofer 2019-01-22T20:36:55Z Re: How do you transform table values to a column replaced by values? https://community.splunk.com/t5/Splunk-Search/How-do-you-transform-table-values-to-a-column-replaced-by-values/m-p/417916#M120214 <P>Hi @mgutschelhofer</P> <P>Try like</P> <PRE><CODE>yoursearch |xyseries stage status count |stats values(OK) as OK values(FAIL) as FAIL by stage </CODE></PRE> Wed, 23 Jan 2019 02:48:53 GMT https://community.splunk.com/t5/Splunk-Search/How-do-you-transform-table-values-to-a-column-replaced-by-values/m-p/417916#M120214 vnravikumar 2019-01-23T02:48:53Z Re: How do you transform table values to a column replaced by values? https://community.splunk.com/t5/Splunk-Search/How-do-you-transform-table-values-to-a-column-replaced-by-values/m-p/417917#M120215 <P>Excellent, this did the job!<BR /> Many Thanks, Martin</P> Wed, 23 Jan 2019 07:27:53 GMT https://community.splunk.com/t5/Splunk-Search/How-do-you-transform-table-values-to-a-column-replaced-by-values/m-p/417917#M120215 mgutschelhofer 2019-01-23T07:27:53Z Re: How do you transform table values to a column replaced by values? https://community.splunk.com/t5/Splunk-Search/How-do-you-transform-table-values-to-a-column-replaced-by-values/m-p/417918#M120216 <P>Welcome <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Wed, 23 Jan 2019 08:56:08 GMT https://community.splunk.com/t5/Splunk-Search/How-do-you-transform-table-values-to-a-column-replaced-by-values/m-p/417918#M120216 vnravikumar 2019-01-23T08:56:08Z