Splunk Search

How to arrange table columns?

spatt
New Member

How do i print the following

service  status  count

Gmdl        200      5

Aesp         200      13

abc           200       8

aesp        501       61

abc            501       22

Gmdl         400       11

 


as

                200        400     501

gmdl      5               11        0

aesp       13             61       0

abc          8              0          22

 

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @spatt ,

instead using:

<your_search>
| stats count BY service status  

use

<your_search>
| chart count OVER service BY status  

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Cloud Platform | Customer Change Announcement: Email Notification Will Be Available ...

The Notification Team is migrating our email service provider since currently there’s no support ...

Mastering Synthetic Browser Testing: Pro Tips to Keep Your Web App Running Smoothly

To start, if you're new to synthetic monitoring, I recommend exploring this synthetic monitoring overview. In ...

Splunk Edge Processor | Popular Use Cases to Get Started with Edge Processor

Splunk Edge Processor offers more efficient, flexible data transformation – helping you reduce noise, control ...