Nested table or headers in between rows

[vijayakumarkb]

Can we have a Splunk result appear like this.

Header 1 . Header 2 Header 3 . Header 4
PPID -1
Column 1. Column 2. Column 3
PPID - 2
Column 1. Column 2. Column 3

[poete]

Hello @vijayakumarkb,

can you please be more precise. ARe the Header1, ...Header 4 static values, or the result of the SPL search.

The reason I am asking is that, in case the fields are static, this can be done quite easily with a html dashboard.

Otherwise, I need mode details to have a look at your question.

[vijayakumarkb]

Hello Poete,

Header 1 . Header 2 Header 3 . Header 4 are static values

PPID -1 and PPID -1 are dynamic values. it should come from a query.

index=_int <> - will give the PPID values, we have to iterate the PPID values and based on each PPID values column 1 column 2 will be generated