https://community.splunk.com/t5/Splunk-Search/convert-pivot-table-into-stats/m-p/561938#M195437 <P>Worked perfectly. TY!</P> Tue, 03 Aug 2021 17:53:23 GMT jeck11 2021-08-03T17:53:23Z https://community.splunk.com/t5/Splunk-Search/convert-pivot-table-into-stats/m-p/561921#M195434 <P>Hi everyone,</P><P>I have a very basic search outputting two types of entries into a field called "event". I need to get a count of each type per hour. I've been able to get the view I want using the pivot but don't really want to burden the system maintaining the data model if I don't need to. So here's my question:</P><P><BR />How can I create a table (assuming using stats) to show two rows (one for each type) and columns for each hour's total (descending)?</P><P>&nbsp;</P><P>Desired format:<BR /><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Desired format using pivot" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15405i1FA7ADC31099F0ED/image-size/large?v=v2&amp;px=999" role="button" title="2021-08-03 11_42_16-Window.png" alt="Desired format using pivot" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Desired format using pivot</span></span></P><P>Current output when I try to use stats:&nbsp;<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Current stats output" style="width: 948px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15406i22002250FF126983/image-size/large?v=v2&amp;px=999" role="button" title="2021-08-03 11_39_38-Window.png" alt="Current stats output" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Current stats output</span></span></P> Tue, 03 Aug 2021 16:07:55 GMT https://community.splunk.com/t5/Splunk-Search/convert-pivot-table-into-stats/m-p/561921#M195434 jeck11 2021-08-03T16:07:55Z https://community.splunk.com/t5/Splunk-Search/convert-pivot-table-into-stats/m-p/561925#M195435 <LI-CODE lang="markup">| eval time=strftime(_time,"%Y-%m-%d %H:%M") | xyseries event time count</LI-CODE> Tue, 03 Aug 2021 16:25:58 GMT https://community.splunk.com/t5/Splunk-Search/convert-pivot-table-into-stats/m-p/561925#M195435 ITWhisperer 2021-08-03T16:25:58Z https://community.splunk.com/t5/Splunk-Search/convert-pivot-table-into-stats/m-p/561938#M195437 <P>Worked perfectly. TY!</P> Tue, 03 Aug 2021 17:53:23 GMT https://community.splunk.com/t5/Splunk-Search/convert-pivot-table-into-stats/m-p/561938#M195437 jeck11 2021-08-03T17:53:23Z https://community.splunk.com/t5/Splunk-Search/convert-pivot-table-into-stats/m-p/562541#M195647 <P>we are the leading waste collector for &lt;a href="<A href="https://www.shaktiplasticinds.com/extended-producer-responsibility-epr" target="_blank">https://www.shaktiplasticinds.com/extended-producer-responsibility-epr</A>"Extended producer responsibility &lt;/a&gt; waste management</P> Mon, 09 Aug 2021 07:11:01 GMT https://community.splunk.com/t5/Splunk-Search/convert-pivot-table-into-stats/m-p/562541#M195647 ajaynegi09 2021-08-09T07:11:01Z https://community.splunk.com/t5/Splunk-Search/convert-pivot-table-into-stats/m-p/562542#M195648 <P>we are the leading waste collector for &lt;a href="<A href="https://www.shaktiplasticinds.com/extended-producer-responsibility-epr" target="_blank">https://www.shaktiplasticinds.com/extended-producer-responsibility-epr</A>"Extended producer responsibility &lt;/a&gt; waste management</P> Mon, 09 Aug 2021 07:12:21 GMT https://community.splunk.com/t5/Splunk-Search/convert-pivot-table-into-stats/m-p/562542#M195648 ajaynegi09 2021-08-09T07:12:21Z