topic Re: How to format dynamic columns output after transpose? in Splunk Search

How to format dynamic columns output after transpose?

bj6192 — Tue, 21 Nov 2017 02:49:38 GMT

Hi All,
We use transpose to display our result like below sample;
item 2017/11/01 2017/11/02 2017....
a 10000.01 20000.1 ....
b 300.05 5000.1 .....

We need show the result like this;
item 2017/11/01 2017/11/02 2017....
a 10,000 20,000 ....
b 300 5,000 .....

And when we format the result before the transpose command, the output after
transpose will return the original output. Does any command or method to meet
our require?
Thank You.

Re: How to format dynamic columns output after transpose?

kamlesh_vaghela — Tue, 21 Nov 2017 07:04:09 GMT

Can you please try below function to format count.

YOUR_SEARCh | eval YOUR_NUMERIC_VALUE=tostring(YOUR_NUMERIC_VALUE, "commas") | transpose

Thanks

Re: How to format dynamic columns output after transpose?

kamlesh_vaghela — Fri, 24 Nov 2017 06:37:02 GMT

Hi @bj6192,

Have you found your answer?

Re: How to format dynamic columns output after transpose?

bj6192 — Wed, 06 Dec 2017 03:49:08 GMT

Thank you. It work now.