I have to export data from database table where the table format is as shown below,
But,I want this data to be represented in splunk in different table format like this,
Is there any way to represent this in splunk when table formats are different in comparison to database.
Hi @Sss,
you have to use the chart command, something like this:
<your_search>
| chart values(Status) AS Status OVER Profile BY version
Ciao.
Giuseppe
I tried this and got the result thanks,but if at all i need to add two more columns into it
where database table is like,
and i want this data to be represented in splunk as below,
How can we add two more columns in our chart command -
| chart values(Status) AS Status OVER Profile BY version
thank you,I will try doing this way
okay thank you.