Hi Team,
I have a simple requirement but unable to get it. I am using a query
index=tms sourcetype=kafka type=ssh| stats count by NETYPE
For above query I am getting output as below
| NETYPE | Count |
| CISCO | 100 |
| JUNIPER | 200 |
However, I want output as
| CISCO | JUNIPER |
| 100 | 200 |
Can you please help how can I get above o/p table
| transpose 0 header_field=NETYPE
| fields - column