https://community.splunk.com/t5/Splunk-Search/create-a-simple-table/m-p/32192#M6695 <P>hi there,</P> <P>I have a log like this</P> <P>ip=192.168.20.10, size=458372, url=<A href="http://download.microsoft.com">http://download.microsoft.com</A></P> <P>I have a lot of them and I wanna bring them into a table like this</P> <H2>IP | Size in Byte | URL</H2> <P>192.168.20.10 |458372 | <A href="http://download.microsoft.com">http://download.microsoft.com</A></P> <P>all requierd fields are already extracted, but I don't now the right syntax for the search box. </P> <P>I would appriciate any advice,</P> <P>thank you!</P> Fri, 09 Dec 2011 13:31:17 GMT frankysplunk 2011-12-09T13:31:17Z https://community.splunk.com/t5/Splunk-Search/create-a-simple-table/m-p/32192#M6695 <P>hi there,</P> <P>I have a log like this</P> <P>ip=192.168.20.10, size=458372, url=<A href="http://download.microsoft.com">http://download.microsoft.com</A></P> <P>I have a lot of them and I wanna bring them into a table like this</P> <H2>IP | Size in Byte | URL</H2> <P>192.168.20.10 |458372 | <A href="http://download.microsoft.com">http://download.microsoft.com</A></P> <P>all requierd fields are already extracted, but I don't now the right syntax for the search box. </P> <P>I would appriciate any advice,</P> <P>thank you!</P> Fri, 09 Dec 2011 13:31:17 GMT https://community.splunk.com/t5/Splunk-Search/create-a-simple-table/m-p/32192#M6695 frankysplunk 2011-12-09T13:31:17Z https://community.splunk.com/t5/Splunk-Search/create-a-simple-table/m-p/32193#M6696 <PRE><CODE>... | table ip size url </CODE></PRE> <P>If you want to have "userfriendly" names in the table instead, use <CODE>rename</CODE> for that.</P> Fri, 09 Dec 2011 13:46:00 GMT https://community.splunk.com/t5/Splunk-Search/create-a-simple-table/m-p/32193#M6696 Ayn 2011-12-09T13:46:00Z https://community.splunk.com/t5/Splunk-Search/create-a-simple-table/m-p/32194#M6697 <P>thank you very much!</P> Fri, 09 Dec 2011 13:51:37 GMT https://community.splunk.com/t5/Splunk-Search/create-a-simple-table/m-p/32194#M6697 frankysplunk 2011-12-09T13:51:37Z https://community.splunk.com/t5/Splunk-Search/create-a-simple-table/m-p/32195#M6698 <P>So specifically:</P> <PRE><CODE>your search | rename ip as IP, size as "Size in bytes", url as URL | table IP, "Size in bytes", URL </CODE></PRE> Fri, 09 Dec 2011 16:08:51 GMT https://community.splunk.com/t5/Splunk-Search/create-a-simple-table/m-p/32195#M6698 rtadams89 2011-12-09T16:08:51Z