Splunk Search

How to display table with vertical title?

JohnnyMnemonic
Explorer

I'm sure this must be possible, but I can't find a way, unfortunately there are a couple of threads on this with no solution 😞

I just want to display a table vertically, with titles as column 1 and values as column 2, like a bullet list.

All the information I found suggests that the "transposse" command is the way to go, but I don't know how to achieve it.

Any suggestion?

Field 1 Field 2 Field 3
Value Value Value

 

And this is how I'd like to express the table:

Fields Values
Field 1 Value
Field 2 Value
Field 3 Value
Labels (4)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust
| eval Fields="Values"
| transpose 0 column_name=Fields header_field=Fields

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust
| eval Fields="Values"
| transpose 0 column_name=Fields header_field=Fields

JohnnyMnemonic
Explorer

It works! Thanks

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...