Help with creating table

Pip9ball — Wed, 15 Mar 2023 21:20:41 GMT

Hello All -

I'm fairly new to Splunk and I've been racking my head for the past 8 hours trying to create a table for comparing two sets of runs.

My search string is as follows:

index="fe" source="regress_rpt" pipeline="soc" version IN ("(version="23ww09a" OR version="23ww10b")") dut="*" cthModel="*" (testlist="*") (testName="*") status=* | rex field=testPath "/regression/(?<regressionPath>.*)" | search regressionPath="*" | search regressionPath="***"| stats values(cyclesPerCpuSec) values(version) by testPath | reverse

This will generate a table similar to:

testPath	values(cyclesPerCpuSec)	vales(version)
test.6	719.91	23ww10b
test.5	742.44	23ww10b
test.4	563.46	23ww10b
test.6	694.36	23ww10a
test.5	423.23	23ww10a
test.4	146.34	23ww10a

However, I want to display a table that looks like

testPath	23ww10a	23ww10b
test.6	694.36	719.91
test.5	423.23	742.44
test.4	146.34	563.46

Essentially, I'm trying to create table so I can compare the results of a specific test across different model versions.

Any help is greatly appreciated!

Thanks,

Phil

Re: Help with creating table

bowesmana — Wed, 15 Mar 2023 22:57:21 GMT

Use chart rather than stats

| chart values(cyclesPerCpuSec) over testPath by version

That puts version across the columns and testPath down the side.

Note: When posting SPL snippets, use a code block </> to create a box like above

Re: Help with creating table

Pip9ball — Thu, 16 Mar 2023 15:45:47 GMT

@bowesmana - Thank you so much!

topic Help with creating table in Splunk Search

Help with creating table

Re: Help with creating table

Re: Help with creating table