https://community.splunk.com/t5/Splunk-Search/Rearrange-the-stats-output/m-p/709993#M239920 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/240908">@onthakur</a>&nbsp;,</P><P>use chart command, instead stats:</P><LI-CODE lang="markup">&lt;your_search&gt; | chart count OVER source BY transaction_id </LI-CODE><P>Ciao.</P><P>Giuseppe</P> Tue, 28 Jan 2025 16:50:10 GMT gcusello 2025-01-28T16:50:10Z https://community.splunk.com/t5/Splunk-Search/Rearrange-the-stats-output/m-p/709990#M239918 <P>Team,</P><P>I got stats output as below and I need to rearrange</P><P>stats current output :-</P><P>transaction_id&nbsp; source count<BR />12345&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ABC&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1<BR />12345&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; XYZ&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1</P><P>Required Output :-</P><P>transaction_id&nbsp;&nbsp; ABC &nbsp;&nbsp; XYZ<BR />12345&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1</P> Tue, 28 Jan 2025 16:39:20 GMT https://community.splunk.com/t5/Splunk-Search/Rearrange-the-stats-output/m-p/709990#M239918 onthakur 2025-01-28T16:39:20Z https://community.splunk.com/t5/Splunk-Search/Rearrange-the-stats-output/m-p/709993#M239920 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/240908">@onthakur</a>&nbsp;,</P><P>use chart command, instead stats:</P><LI-CODE lang="markup">&lt;your_search&gt; | chart count OVER source BY transaction_id </LI-CODE><P>Ciao.</P><P>Giuseppe</P> Tue, 28 Jan 2025 16:50:10 GMT https://community.splunk.com/t5/Splunk-Search/Rearrange-the-stats-output/m-p/709993#M239920 gcusello 2025-01-28T16:50:10Z https://community.splunk.com/t5/Splunk-Search/Rearrange-the-stats-output/m-p/710002#M239923 <P>This resolution worked with minor changes . Many thanks for your help<BR /><BR />| chart count OVER transaction_id BY source</P> Tue, 28 Jan 2025 17:43:36 GMT https://community.splunk.com/t5/Splunk-Search/Rearrange-the-stats-output/m-p/710002#M239923 onthakur 2025-01-28T17:43:36Z https://community.splunk.com/t5/Splunk-Search/Rearrange-the-stats-output/m-p/710090#M239936 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/240908">@onthakur</a>&nbsp;,</P><P>good for you, see next time!</P><P>Ciao and happy splunking</P><P>Giuseppe</P><P>P.S.: Karma Points are appreciated <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Wed, 29 Jan 2025 08:02:52 GMT https://community.splunk.com/t5/Splunk-Search/Rearrange-the-stats-output/m-p/710090#M239936 gcusello 2025-01-29T08:02:52Z