https://community.splunk.com/t5/Splunk-Search/table-view-using-spl/m-p/750388#M242304 <P>Assuming that this is an accurate representation of your data, you could try something like this</P><LI-CODE lang="markup">| eval array=json_array_to_mv(json_keys(_raw),false()) | foreach array mode=multivalue [| eval set=mvappend(set,json_extract(_raw,&lt;&lt;ITEM&gt;&gt;))] | eval row=mvrange(0,mvcount(array)) | mvexpand row | eval key=mvindex(array,row) | eval fields=mvindex(set,row) | table key fields | fromjson fields | fields - fields | transpose 0 header_field=key column_name=samples</LI-CODE> Thu, 24 Jul 2025 09:56:46 GMT ITWhisperer 2025-07-24T09:56:46Z https://community.splunk.com/t5/Splunk-Search/table-view-using-spl/m-p/750382#M242303 <DIV><DIV><SPAN>{</SPAN></DIV><DIV><SPAN>&nbsp; </SPAN><SPAN>"abcdxyz"</SPAN><SPAN> : {</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"transaction"</SPAN><SPAN> : </SPAN><SPAN>"abcdxyz"</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"sampleCount"</SPAN><SPAN> : </SPAN><SPAN>60</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"errorCount"</SPAN><SPAN> : </SPAN><SPAN>13</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"errorPct"</SPAN><SPAN> : </SPAN><SPAN>21.666666</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"meanResTime"</SPAN><SPAN> : </SPAN><SPAN>418.71666666666664</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"medianResTime"</SPAN><SPAN> : </SPAN><SPAN>264.5</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"minResTime"</SPAN><SPAN> : </SPAN><SPAN>0.0</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"maxResTime"</SPAN><SPAN> : </SPAN><SPAN>4418.0</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"pct1ResTime"</SPAN><SPAN> : </SPAN><SPAN>368.4</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"pct2ResTime"</SPAN><SPAN> : </SPAN><SPAN>3728.049999999985</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"pct3ResTime"</SPAN><SPAN> : </SPAN><SPAN>4418.0</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"throughput"</SPAN><SPAN> : </SPAN><SPAN>0.25086548592644625</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"receivedKBytesPerSec"</SPAN><SPAN> : </SPAN><SPAN>0.16945669591340123</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"sentKBytesPerSec"</SPAN><SPAN> : </SPAN><SPAN>0.3197146692547623</SPAN></DIV><DIV><SPAN>&nbsp; },</SPAN></DIV><DIV><SPAN>&nbsp; </SPAN><SPAN>"efghxyz"</SPAN><SPAN> : {</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"transaction"</SPAN><SPAN> : </SPAN><SPAN>"efghxyz"</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"sampleCount"</SPAN><SPAN> : </SPAN><SPAN>60</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"errorCount"</SPAN><SPAN> : </SPAN><SPAN>13</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"errorPct"</SPAN><SPAN> : </SPAN><SPAN>21.666666</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"meanResTime"</SPAN><SPAN> : </SPAN><SPAN>421.8</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"medianResTime"</SPAN><SPAN> : </SPAN><SPAN>32.0</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"minResTime"</SPAN><SPAN> : </SPAN><SPAN>0.0</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"maxResTime"</SPAN><SPAN> : </SPAN><SPAN>3566.0</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"pct1ResTime"</SPAN><SPAN> : </SPAN><SPAN>3258.5</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"pct2ResTime"</SPAN><SPAN> : </SPAN><SPAN>3497.6</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"pct3ResTime"</SPAN><SPAN> : </SPAN><SPAN>3566.0</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"throughput"</SPAN><SPAN> : </SPAN><SPAN>0.24752066797577596</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"receivedKBytesPerSec"</SPAN><SPAN> : </SPAN><SPAN>0.34477244084256037</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"sentKBytesPerSec"</SPAN><SPAN> : </SPAN><SPAN>0.08463804872238082</SPAN></DIV><DIV><SPAN>&nbsp; },</SPAN></DIV><DIV><SPAN>&nbsp; </SPAN><SPAN>"ijklxyz"</SPAN><SPAN> : {</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"transaction"</SPAN><SPAN> : </SPAN><SPAN>"ijklxyz"</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"sampleCount"</SPAN><SPAN> : </SPAN><SPAN>60</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"errorCount"</SPAN><SPAN> : </SPAN><SPAN>13</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"errorPct"</SPAN><SPAN> : </SPAN><SPAN>21.666666</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"meanResTime"</SPAN><SPAN> : </SPAN><SPAN>27.733333333333338</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"medianResTime"</SPAN><SPAN> : </SPAN><SPAN>27.5</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"minResTime"</SPAN><SPAN> : </SPAN><SPAN>0.0</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"maxResTime"</SPAN><SPAN> : </SPAN><SPAN>241.0</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"pct1ResTime"</SPAN><SPAN> : </SPAN><SPAN>41.599999999999994</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"pct2ResTime"</SPAN><SPAN> : </SPAN><SPAN>52.699999999999974</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"pct3ResTime"</SPAN><SPAN> : </SPAN><SPAN>241.0</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"throughput"</SPAN><SPAN> : </SPAN><SPAN>0.25115636576738737</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"receivedKBytesPerSec"</SPAN><SPAN> : </SPAN><SPAN>0.3331214746541367</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"sentKBytesPerSec"</SPAN><SPAN> : </SPAN><SPAN>0.08588125143891667</SPAN></DIV><DIV><SPAN>&nbsp; },</SPAN></DIV><DIV><SPAN>&nbsp; </SPAN><SPAN>"mnopxyz"</SPAN><SPAN> : {</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"transaction"</SPAN><SPAN> : </SPAN><SPAN>"mnopxyz"</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"sampleCount"</SPAN><SPAN> : </SPAN><SPAN>60</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"errorCount"</SPAN><SPAN> : </SPAN><SPAN>13</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"errorPct"</SPAN><SPAN> : </SPAN><SPAN>21.666666</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"meanResTime"</SPAN><SPAN> : </SPAN><SPAN>491.74999999999994</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"medianResTime"</SPAN><SPAN> : </SPAN><SPAN>279.5</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"minResTime"</SPAN><SPAN> : </SPAN><SPAN>0.0</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"maxResTime"</SPAN><SPAN> : </SPAN><SPAN>4270.0</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"pct1ResTime"</SPAN><SPAN> : </SPAN><SPAN>381.29999999999995</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"pct2ResTime"</SPAN><SPAN> : </SPAN><SPAN>4076.55</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"pct3ResTime"</SPAN><SPAN> : </SPAN><SPAN>4270.0</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"throughput"</SPAN><SPAN> : </SPAN><SPAN>0.2440254437195985</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"receivedKBytesPerSec"</SPAN><SPAN> : </SPAN><SPAN>0.16483632755942018</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>"sentKBytesPerSec"</SPAN><SPAN> : </SPAN><SPAN>0.2839297997262848</SPAN></DIV><DIV><SPAN>&nbsp; }</SPAN></DIV><DIV><SPAN>}<BR /><BR /></SPAN>I need to create a table view from the above log event which was captured as a single event, like the below table format:<BR /><BR /><TABLE width="498"><TBODY><TR><TD width="242">samples</TD><TD width="64">abcdxyz</TD><TD width="64">efghxyz</TD><TD width="64">ijklxyz</TD><TD width="64">mnopxyz</TD></TR><TR><TD>&nbsp; &nbsp; "transaction" :</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD></TR><TR><TD>&nbsp; &nbsp; "sampleCount"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD></TR><TR><TD>&nbsp; &nbsp; "errorCount"&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD></TR><TR><TD>&nbsp; &nbsp; "errorPct"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD></TR><TR><TD>&nbsp; &nbsp; "meanResTime"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD></TR><TR><TD>&nbsp; &nbsp; "medianResTime"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD></TR><TR><TD>&nbsp; &nbsp; "minResTime"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD></TR><TR><TD>&nbsp; &nbsp; "maxResTime"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD></TR><TR><TD>&nbsp; &nbsp; "pct1ResTime"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD></TR><TR><TD>&nbsp; &nbsp; "pct2ResTime"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD></TR><TR><TD>&nbsp; &nbsp; "pct3ResTime"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD></TR><TR><TD>&nbsp; &nbsp; "throughput"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD></TR><TR><TD>&nbsp; &nbsp; "receivedKBytesPerSec"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD></TR><TR><TD>&nbsp; &nbsp; "sentKBytesPerSec"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD><TD>&nbsp;</TD></TR></TBODY></TABLE><BR /><BR /><BR /></DIV></DIV> Thu, 24 Jul 2025 08:59:11 GMT https://community.splunk.com/t5/Splunk-Search/table-view-using-spl/m-p/750382#M242303 yuvaraj_m91 2025-07-24T08:59:11Z https://community.splunk.com/t5/Splunk-Search/table-view-using-spl/m-p/750388#M242304 <P>Assuming that this is an accurate representation of your data, you could try something like this</P><LI-CODE lang="markup">| eval array=json_array_to_mv(json_keys(_raw),false()) | foreach array mode=multivalue [| eval set=mvappend(set,json_extract(_raw,&lt;&lt;ITEM&gt;&gt;))] | eval row=mvrange(0,mvcount(array)) | mvexpand row | eval key=mvindex(array,row) | eval fields=mvindex(set,row) | table key fields | fromjson fields | fields - fields | transpose 0 header_field=key column_name=samples</LI-CODE> Thu, 24 Jul 2025 09:56:46 GMT https://community.splunk.com/t5/Splunk-Search/table-view-using-spl/m-p/750388#M242304 ITWhisperer 2025-07-24T09:56:46Z https://community.splunk.com/t5/Splunk-Search/table-view-using-spl/m-p/750394#M242305 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/262891">@yuvaraj_m91</a>&nbsp;</P><P>Try the following:</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="livehybrid_0-1753360336031.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/39743iD9498960D4027575/image-size/medium?v=v2&amp;px=400" role="button" title="livehybrid_0-1753360336031.png" alt="livehybrid_0-1753360336031.png" /></span></P><P>&nbsp;</P><LI-CODE lang="markup">| table _raw | eval parent_keys=json_array_to_mv(json_keys(_raw)) | mvexpand parent_keys | eval _raw=json_extract(_raw, parent_keys) | eval child_keys=json_keys(item) | spath | fields - _* | transpose 0 header_field=parent_keys</LI-CODE><P>&nbsp;</P><P><span class="lia-unicode-emoji" title=":glowing_star:">🌟</span><SPAN>&nbsp;</SPAN><STRONG>Did this answer help you?</STRONG><SPAN>&nbsp;</SPAN>If so, please consider:</P><UL><LI>Adding karma to show it was useful</LI><LI>Marking it as the solution if it resolved your issue</LI><LI>Commenting if you need any clarification</LI></UL><P>Your feedback encourages the volunteers in this community to continue contributing</P> Thu, 24 Jul 2025 12:32:41 GMT https://community.splunk.com/t5/Splunk-Search/table-view-using-spl/m-p/750394#M242305 livehybrid 2025-07-24T12:32:41Z