Dashboards & Visualizations

Need to align the table output

senthamilselvan
Engager

Hi Team,
I have imported the logs and i used search query using multikv. The fields are generated fine, but the table alignment is not looking good.
Please find the search query and the output.
index=test sourcetype=gglogs3 | multikv |table REPSD REPHG RPLXP

I have attached the output. In the output, i want to remove all the empty lines and also "====" as well.

alt text

Tags (1)
0 Karma

DEAD_BEEF
Builder

You can specify in your query that there must be a value in a field, that is do not allow blanks to be in your results by using

REPSD=* REPHG=* RPLXP=*

You can eliminate fields with certain values (=) by using:

REPSD=* REPHG=* RPLXP=* AND NOT (REPSD="*=*" OR REPHG="*=*" OR RPLXP="*=*")
0 Karma

p_gurav
Champion

Hi senthamilselvanj,

You can try using | search (REPSD=* NOT REPSD="*=*") (REPHG=* NOT REPSD="*=*") RPLXP=* before your search query

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...