Create table with yxz

sphiwee · ‎07-13-2020

I have the query below, but i i dont want the services to like this.. how can i get the names of the services to be visualized on the headers having the status running showing under each service. and the server to be in the far left.

sphiwee_1-1594323294882(2).png

I want it to be like this with the services being where the blue colour is and on the left to be the server so i can have servers , services and status of all my servers

sphiwee_2-1594323394192(1).png

twesty · ‎07-13-2020

I think that you will find this blog really useful for trying to achieve what you are looking for: https://www.splunk.com/en_us/blog/tips-and-tricks/splunk-clara-fication-transpose-xyseries-untable-a...

Create table with yxz

chart

eval

stats

table

timechart

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Join the Conversation

Create table with yxz

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.