Table in Splunk

[Roopashree]

Hi,

I wanted to create a table as below. I am extracting Status and Reason using rex. How can I create this. Count column should count the events- I used stats count by ..

[gcusello]

Hi @Roopashree,

Splunk isn't Excel, so you cannot merge two cels, you could have the NOT_OK value in both the rows:

<your_search>
| rex 1
| rex 2
| stats count BY Status Reasons

please next time add also the sample in text mode.

Ciao.

Giuseppe