Splunk Search

How to arrange table columns?

spatt
New Member

How do i print the following

service  status  count

Gmdl        200      5

Aesp         200      13

abc           200       8

aesp        501       61

abc            501       22

Gmdl         400       11

 


as

                200        400     501

gmdl      5               11        0

aesp       13             61       0

abc          8              0          22

 

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @spatt ,

instead using:

<your_search>
| stats count BY service status  

use

<your_search>
| chart count OVER service BY status  

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...