Hello I have a little problem with Splunk! I have a table that basically contains data in the following way
|
number |
value |
|
1 |
A |
|
1 |
B |
|
2 |
C |
|
3 |
D |
|
3 |
E |
I would like to have a table like
|
number |
value |
|
1 |
A B |
|
2 |
C |
|
3 |
D |
As you can see, I would like to have the data in the same cells.
If you have a solution 🙂
Hi @fperalde,
you have to use the stats command with the value option, something like this:
<your_search>
| stats values(value) AS value BY numberCiao.
Giuseppe
Hi @fperalde,
you have to use the stats command with the value option, something like this:
<your_search>
| stats values(value) AS value BY numberCiao.
Giuseppe
Hi @fperalde,
good for you, see next time!
Ciao and happy splunking
Giuseppe
P.S.: Karma Points are appreciated 😉