... | rename Metrics as " " Value as " "
Try that, or do space dot space, etc. I'm putting more than one space between the second quotes but the forum is changing to one space
Do these two columns have names? You could try | search col2!="Value"
Out of curiosity, why are you using untable
or transpose
command? You should be able to get the desired result with just the table
command like this table Metric Value
No. In my actual search the result is
cpu_core ram_size
4 8
query = original search......... | untable _time Metrics Value... (I know how to remove the _time field )
when I untable them i get it as
Metrics Value
cpu_core 4
ram_size 8
Am curious to know whether we can remove the headers itself!!
What visualization you're try to use? If you're using table, then a table need it's header/column name. You can try html visualization in you can you need custom visualization.