topic Re: How can I add new columns and name them by result or subsearch? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-can-I-add-new-columns-and-name-them-by-result-or-subsearch/m-p/199240#M57681 <P>Hi @millie be sure to accept your answer so other users know it's correct when searching for similar issues <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Wed, 18 Jun 2014 01:27:33 GMT ppablo 2014-06-18T01:27:33Z How can I add new columns and name them by result or subsearch? https://community.splunk.com/t5/Splunk-Search/How-can-I-add-new-columns-and-name-them-by-result-or-subsearch/m-p/199238#M57679 <P>Hi! <BR />I would like to draw a chart with stacked bars , but I don't know how to add columns depend on result. for example, I first search and get the result as:<BR /> <CODE><BR /> fieldA fieldB<BR /> A 1<BR /> B 2<BR /> C 3<BR /> D 4<BR /> </CODE></P> <P>But for drawing the chart, I need a result table like this, fields named by the result I got :<BR /> <CODE><BR /> fieldA A B C D<BR /> dummy 1 2 3 4<BR /> </CODE></P> <P>The result might not be ABCD only. How could I do something like this? Thanks</P> Tue, 17 Jun 2014 05:48:41 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-add-new-columns-and-name-them-by-result-or-subsearch/m-p/199238#M57679 millie 2014-06-17T05:48:41Z Re: How can I add new columns and name them by result or subsearch? https://community.splunk.com/t5/Splunk-Search/How-can-I-add-new-columns-and-name-them-by-result-or-subsearch/m-p/199239#M57680 <P>Problem has been solved now, I've found a search command called "xyseries". I search as:<BR /> <CODE><BR /> search ... | xyseries fieldA fieldB fieldB | addcoltotals labelfield=fieldA label="dummy" | where fieldA="dummy"<BR /> </CODE></P> Tue, 17 Jun 2014 06:52:44 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-add-new-columns-and-name-them-by-result-or-subsearch/m-p/199239#M57680 millie 2014-06-17T06:52:44Z Re: How can I add new columns and name them by result or subsearch? https://community.splunk.com/t5/Splunk-Search/How-can-I-add-new-columns-and-name-them-by-result-or-subsearch/m-p/199240#M57681 <P>Hi @millie be sure to accept your answer so other users know it's correct when searching for similar issues <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Wed, 18 Jun 2014 01:27:33 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-add-new-columns-and-name-them-by-result-or-subsearch/m-p/199240#M57681 ppablo 2014-06-18T01:27:33Z