- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

andreafebbo
Communicator
09-05-2016
02:36 AM
Hi
I need to do a classic pivoting in splunk but I cannot find a solution.
I have the first table in the following image and it have to become like the second table.
Of course the families and the name are dinamically generated at run time.
The columns 1st rank, 2nd rank and 3rd rank can have a fixed name.
Thanks a lot
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

renjith_nair
Legend
09-05-2016
02:44 AM
Try this
<your base search to result first table> |xyseries family rank name
OR
<your base search to result first table>|chart values(name) over family by rank
---
What goes around comes around. If it helps, hit it with Karma 🙂
What goes around comes around. If it helps, hit it with Karma 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

renjith_nair
Legend
09-05-2016
02:44 AM
Try this
<your base search to result first table> |xyseries family rank name
OR
<your base search to result first table>|chart values(name) over family by rank
---
What goes around comes around. If it helps, hit it with Karma 🙂
What goes around comes around. If it helps, hit it with Karma 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

andreafebbo
Communicator
09-05-2016
02:54 AM
This is exactly what I needed!
Thanks a lot!
