https://community.splunk.com/t5/Splunk-Search/How-to-split-Data-in-one-column-to-multiple-columns/m-p/317743#M95055 <P>The answer of somesoni 2 is good.</P> <PRE><CODE> your current search giving fields location product price | xyseries location product price | stats sum(product*) as product* by location </CODE></PRE> Sat, 03 Mar 2018 01:24:28 GMT HiroshiSatoh 2018-03-03T01:24:28Z https://community.splunk.com/t5/Splunk-Search/How-to-split-Data-in-one-column-to-multiple-columns/m-p/317740#M95052 <P>hi, </P> <P>I had the data in the following format</P> <PRE><CODE>location product price location1 Product1 price1 location1 product2 price2 location2 product1 price3 location2 product2 price4 </CODE></PRE> <P>I need to re-align it in following format</P> <PRE><CODE>location product1 product2 location1 price1 price2 location2 price3 price4 </CODE></PRE> <P>I can do it by splitting column by data model or pivot from base query. but is there any way for the using the SPL the following can be achieved.</P> Fri, 02 Mar 2018 15:19:59 GMT https://community.splunk.com/t5/Splunk-Search/How-to-split-Data-in-one-column-to-multiple-columns/m-p/317740#M95052 himpor 2018-03-02T15:19:59Z https://community.splunk.com/t5/Splunk-Search/How-to-split-Data-in-one-column-to-multiple-columns/m-p/317741#M95053 <P>Try this!</P> <PRE><CODE>(your search) |table location product price |eval {product}=price |stats sum(product*) as product* by location </CODE></PRE> Fri, 02 Mar 2018 15:55:40 GMT https://community.splunk.com/t5/Splunk-Search/How-to-split-Data-in-one-column-to-multiple-columns/m-p/317741#M95053 HiroshiSatoh 2018-03-02T15:55:40Z https://community.splunk.com/t5/Splunk-Search/How-to-split-Data-in-one-column-to-multiple-columns/m-p/317742#M95054 <P>Try like this</P> <PRE><CODE>your current search giving fields location product price | xyseries location product price </CODE></PRE> <P>See more about xyseries command here: <A href="http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/Xyseries">http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/Xyseries</A></P> Fri, 02 Mar 2018 16:36:28 GMT https://community.splunk.com/t5/Splunk-Search/How-to-split-Data-in-one-column-to-multiple-columns/m-p/317742#M95054 somesoni2 2018-03-02T16:36:28Z https://community.splunk.com/t5/Splunk-Search/How-to-split-Data-in-one-column-to-multiple-columns/m-p/317743#M95055 <P>The answer of somesoni 2 is good.</P> <PRE><CODE> your current search giving fields location product price | xyseries location product price | stats sum(product*) as product* by location </CODE></PRE> Sat, 03 Mar 2018 01:24:28 GMT https://community.splunk.com/t5/Splunk-Search/How-to-split-Data-in-one-column-to-multiple-columns/m-p/317743#M95055 HiroshiSatoh 2018-03-03T01:24:28Z