Dashboards & Visualizations

Is there any way to represent this in Splunk when table formats are different in comparison to database?

Sss
Path Finder

I have to export data from database table where the table format is as shown below,

Sss_0-1686129319011.png

But,I want this data to be represented in splunk in different table format like this,

Sss_1-1686129380038.png

Is there any way to represent this in splunk when table formats are different in comparison to database.

 

 

Labels (1)
Tags (1)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

And add 

| fillnull value="_"

to the end of @gcusello 's SPL 

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @Sss,

you have to use the chart command, something like this:

<your_search>
| chart values(Status) AS Status OVER Profile BY version

Ciao.

Giuseppe

Sss
Path Finder

I tried this and got the result thanks,but if at all i need to add two more columns into it

where database table is like,

Sss_0-1686135583017.png

and i want this data to be represented in splunk as below,

Sss_1-1686135626747.png

How can we add two more columns in our chart command - 

| chart values(Status) AS Status OVER Profile BY version

 

0 Karma

Sss
Path Finder

thank you,I will try doing this way

 

0 Karma

isoutamo
SplunkTrust
SplunkTrust

And add 

| fillnull value="_"

to the end of @gcusello 's SPL 

Sss
Path Finder

okay thank you.

 

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...