Splunk Search

How to build a two way table?

Path Finder

Hi !

I am trying to build a two way table like :

|          | Male | Female | Total |
| Child    | 2    | 3      | 5     |
| Teenager | 2    | 1      | 3     |
| Adult    | 10   | 11     | 21    |

I see how to count by gender or by age but I don't see how I can have both in the same table. Your help will be very appreciated, thanks!

Tags (2)
0 Karma
1 Solution

SplunkTrust
SplunkTrust

Hi Clovisa,
see the chart command ( http://docs.splunk.com/Documentation/Splunk/7.1.1/SearchReference/Chart ).
you should try something like this

index=my_index
| chart count OVER age BY gender
| addtotals
| addcoltotals labelfield=age label="Total"

Bye.
Giuseppe

View solution in original post

0 Karma

SplunkTrust
SplunkTrust

Hi Clovisa,
see the chart command ( http://docs.splunk.com/Documentation/Splunk/7.1.1/SearchReference/Chart ).
you should try something like this

index=my_index
| chart count OVER age BY gender
| addtotals
| addcoltotals labelfield=age label="Total"

Bye.
Giuseppe

View solution in original post

0 Karma

Path Finder

It's perfect, thanks a lot Giuseppe !

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!