topic Re: Table Modify Structure in Splunk Search https://community.splunk.com/t5/Splunk-Search/Table-Modify-Structure/m-p/41059#M9495 <P>productID, TxDuration, Tier are three fields</P> Wed, 28 Dec 2011 09:13:20 GMT adityapavan18 2011-12-28T09:13:20Z Table Modify Structure https://community.splunk.com/t5/Splunk-Search/Table-Modify-Structure/m-p/41057#M9493 <P>I have a query which results in following data</P> <P><IMG src="http://splunk-base.splunk.com/" alt="alt text" /></P> <P>But i need to generate a table in this format</P> <P><IMG src="http://splunk-base.splunk.com/" alt="alt text" /></P> Wed, 28 Dec 2011 09:06:11 GMT https://community.splunk.com/t5/Splunk-Search/Table-Modify-Structure/m-p/41057#M9493 adityapavan18 2011-12-28T09:06:11Z Re: Table Modify Structure https://community.splunk.com/t5/Splunk-Search/Table-Modify-Structure/m-p/41058#M9494 <P>sorry images not uploaded properly..</P> <P>I have a query which results in following data</P> <P>ProductID txnDuration Tier</P> <HR /> <P>1 0.12 Tier_1</P> <HR /> <P>1 0.14 Tier_2</P> <HR /> <P>1 1.25 Tier_3</P> <HR /> <P>2 0.56 Tier_1</P> <HR /> <P>2 0.89 Tier_2</P> <P>But i need to generate a table in this format</P> <P>productID Tier_1 Tier_2 Tier_3</P> <HR /> <P>1 0.12 0.14 1.25</P> <HR /> <P>2 0.56 0.89</P> <P>Can any one help me here please.</P> Mon, 28 Sep 2020 10:14:57 GMT https://community.splunk.com/t5/Splunk-Search/Table-Modify-Structure/m-p/41058#M9494 adityapavan18 2020-09-28T10:14:57Z Re: Table Modify Structure https://community.splunk.com/t5/Splunk-Search/Table-Modify-Structure/m-p/41059#M9495 <P>productID, TxDuration, Tier are three fields</P> Wed, 28 Dec 2011 09:13:20 GMT https://community.splunk.com/t5/Splunk-Search/Table-Modify-Structure/m-p/41059#M9495 adityapavan18 2011-12-28T09:13:20Z Re: Table Modify Structure https://community.splunk.com/t5/Splunk-Search/Table-Modify-Structure/m-p/41060#M9496 <P>You could use chart instead of table</P> <P>... | chart sum(TxDuration) over ProductID by Tier</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Chart">http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Chart</A></P> Wed, 28 Dec 2011 12:01:32 GMT https://community.splunk.com/t5/Splunk-Search/Table-Modify-Structure/m-p/41060#M9496 imrago 2011-12-28T12:01:32Z