Do these two columns have names? You could try
| search col2!="Value"
Out of curiosity, why are you using
transpose command? You should be able to get the desired result with just the
table command like this
table Metric Value
No. In my actual search the result is
query = original search......... | untable _time Metrics Value... (I know how to remove the _time field )
when I untable them i get it as
Am curious to know whether we can remove the headers itself!!
What visualization you're try to use? If you're using table, then a table need it's header/column name. You can try html visualization in you can you need custom visualization.
... | rename Metrics as " " Value as " "
Try that, or do space dot space, etc. I'm putting more than one space between the second quotes but the forum is changing to one space