https://community.splunk.com/t5/Splunk-Search/How-to-transform-a-table/m-p/610680#M212381 <P>Hi,</P> <P>How can I transform a table, so that the result would look something like this</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Edwin1471_0-1661347469987.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/21166iB496394CB71A27E8/image-size/medium?v=v2&amp;px=400" role="button" title="Edwin1471_0-1661347469987.png" alt="Edwin1471_0-1661347469987.png" /></span></P> <P>&nbsp;</P> Wed, 24 Aug 2022 14:38:21 GMT Edwin1471 2022-08-24T14:38:21Z https://community.splunk.com/t5/Splunk-Search/How-to-transform-a-table/m-p/610680#M212381 <P>Hi,</P> <P>How can I transform a table, so that the result would look something like this</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Edwin1471_0-1661347469987.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/21166iB496394CB71A27E8/image-size/medium?v=v2&amp;px=400" role="button" title="Edwin1471_0-1661347469987.png" alt="Edwin1471_0-1661347469987.png" /></span></P> <P>&nbsp;</P> Wed, 24 Aug 2022 14:38:21 GMT https://community.splunk.com/t5/Splunk-Search/How-to-transform-a-table/m-p/610680#M212381 Edwin1471 2022-08-24T14:38:21Z https://community.splunk.com/t5/Splunk-Search/How-to-transform-a-table/m-p/610687#M212382 <LI-CODE lang="markup">| transpose 0 header_field=Process column_name=Process</LI-CODE> Wed, 24 Aug 2022 14:14:04 GMT https://community.splunk.com/t5/Splunk-Search/How-to-transform-a-table/m-p/610687#M212382 ITWhisperer 2022-08-24T14:14:04Z https://community.splunk.com/t5/Splunk-Search/How-to-transform-a-table/m-p/610688#M212383 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/247612">@Edwin1471</a>,</P><P>can you share the search you used to have those data?</P><P>Anyway, you could use the transpose command (<A href="https://docs.splunk.com/Documentation/Splunk/9.0.1/SearchReference/Transpose" target="_blank">https://docs.splunk.com/Documentation/Splunk/9.0.1/SearchReference/Transpose</A>).</P><P>putting attention to the options.</P><P>Ciao.</P><P>Giuseppe</P> Wed, 24 Aug 2022 14:14:49 GMT https://community.splunk.com/t5/Splunk-Search/How-to-transform-a-table/m-p/610688#M212383 gcusello 2022-08-24T14:14:49Z https://community.splunk.com/t5/Splunk-Search/How-to-transform-a-table/m-p/611058#M212483 <P>To follow up,</P><P>How can I sort a table by column values, instead of rows after transposing it ?</P> Sat, 27 Aug 2022 19:42:50 GMT https://community.splunk.com/t5/Splunk-Search/How-to-transform-a-table/m-p/611058#M212483 Edwin1471 2022-08-27T19:42:50Z https://community.splunk.com/t5/Splunk-Search/How-to-transform-a-table/m-p/611064#M212485 <P>I am not sure I understand what you are trying to do - the sort command will sort the events (rows) by values in the fields (columns) - can you give an example of what you are trying to achieve?</P> Sun, 28 Aug 2022 05:51:34 GMT https://community.splunk.com/t5/Splunk-Search/How-to-transform-a-table/m-p/611064#M212485 ITWhisperer 2022-08-28T05:51:34Z