Turn on suggestions

Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.

Showing results for

Reporting

Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.

Showing results for

- Community
- :
- Splunk Answers
- :
- Using Splunk
- :
- Reporting
- :
- Pivot 101: I see only two sample data models under...

- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page

Highlighted

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content

Splunk2016

Path Finder

04-15-2015
12:00 PM

Splunk requires data models, but how does a data model match my input file and why does Splunk

needs it to create a Pivot Table?

I see only two sample data models under Pivot. How can I add data models? Does Pivot work like in Excel?

I would appreciate any help. Thanks!

1 Solution

Highlighted

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content

ChrisG

Splunk Employee

04-15-2015
01:09 PM

There is a short Pivot Manual that covers the basic concepts and procedures about how Pivot works in Splunk Enterprise.

I also recommend the Pivot Tutorial, which has a walkthrough with a sample data set.

Highlighted
##
Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content

Splunk2016

Path Finder

04-15-2015
01:37 PM

Thanks!

Highlighted
##
Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

The Pivot Tutorial walks through loading the Buttercup Games sample data and creating the data model.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content

ChrisG

Splunk Employee

04-15-2015
01:38 PM

Highlighted
##
Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

Is there a step by step example or video in creating just Data Model than the reference to Data Model and Pivot Tutorial? The reference seems to be written for an advance Splunk user. We need the Data Model 101 course. Thanks!

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content

Splunk2016

Path Finder

04-15-2015
01:44 PM

Highlighted
##
Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content

ChrisG

Splunk Employee

04-15-2015
01:49 PM

There is a Pivot video I found: https://www.youtube.com/watch?v=MdjDrDTXYWQ.

The tutorial is pretty straightforward, though: it walks you through downloading the sample data, getting it in, and creating the data model. The only extra complexity is that it includes a lookup table to enrich the data.

Highlighted
##
Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

I am stuck on Add lookup attributes from lookup tables but the prices_lookup under Add Attributes with a Lookup is missing and only shows the dnslookup. Did I miss a step?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content

Splunk2016

Path Finder

04-15-2015
02:21 PM

Highlighted
##
Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content

ChrisG

Splunk Employee

04-15-2015
02:23 PM

*lookup attribute in the previous step? http://docs.splunk.com/Documentation/Splunk/6.2.2/PivotTutorial/AddlookupfilestoSplunk#Add*the*field*lookup_definition.

Highlighted
##
Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

I tried but I don't know where the prices.csv resides. It is not in the tutorialdata.zip file downloaded in the first step. Ok I found finally found it. I missed a step. Thanks!

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content

Splunk2016

Path Finder

04-15-2015
02:26 PM

Highlighted
##
Re: Pivot 101: I see only two sample data models under Pivot. How can I add data models? Does Pivot work like Excel?

The download location is mentioned at the top of http://docs.splunk.com/Documentation/Splunk/6.2.2/PivotTutorial/AddlookupfilestoSplunk. It is: http://docs.splunk.com/images/d/db/Prices.csv.zip.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content

ChrisG

Splunk Employee

04-15-2015
02:30 PM