I have the query below, but i i dont want the services to like this.. how can i get the names of the services to be visualized on the headers having the status running showing under each service. and the server to be in the far left.
I want it to be like this with the services being where the blue colour is and on the left to be the server so i can have servers , services and status of all my servers
I think that you will find this blog really useful for trying to achieve what you are looking for: https://www.splunk.com/en_us/blog/tips-and-tricks/splunk-clara-fication-transpose-xyseries-untable-a...