Hi Team,
I have a simple requirement but unable to get it. I am using a query
index=tms sourcetype=kafka type=ssh| stats count by NETYPE
For above query I am getting output as below
NETYPE | Count |
CISCO | 100 |
JUNIPER | 200 |
However, I want output as
CISCO | JUNIPER |
100 | 200 |
Can you please help how can I get above o/p table
| transpose 0 header_field=NETYPE
| fields - column