Splunk Search

Append Column Header Field with Multivalues

cchange
Path Finder

I need to show my table column header in below format. I need to get column name and static header under my column.

Students
Total/Pres/Abs

Can someone please let me know how I can get this format.

0 Karma
1 Solution

woodcock
Esteemed Legend

Like this:

| makeresults
| eval host="test"
| table host
| rename host as "Students
(Total/Pres/Abs)"

View solution in original post

0 Karma

woodcock
Esteemed Legend

Like this:

| makeresults
| eval host="test"
| table host
| rename host as "Students
(Total/Pres/Abs)"
0 Karma

cchange
Path Finder

Thanks it got worked.

0 Karma

gaurav_maniar
Builder

Please provide proper example with sample output and expected output.

0 Karma

cchange
Path Finder

search query | table students | rename students as Students (Total/Pres/Abs)

Current Output:
Students (Total/Pres/Abs)
100/80/20

Desired Output:
Students
(Total/Pres/Abs)

100/80/20

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...