How to make the value to be column

[chrismok]

Hi All,

I remember that Splunk has a command to make the value to column but I forgot it. Anyone remember?

Here the example.

The log file looks like that

Mary.score=65
Tom.score=90
Amy.score=100
Cammi.score=20

For the result, you can see the result that the name will be moved as column name

Mary  |  Tom  | Amy  | Cammi
===========================
65      90     100       20

[kml_uvce]

Try this

...|chart values(Mary_score) AS Mary values(Amy_score) AS Amy values(Tom_score) AS Tom values(Cammi_score) AS Cammi

[kml_uvce]

is this working for you ?

[chrismok]

Yes, but it is quite hard code....

[somesoni2]

Transpose command would work for you if there is only 1 row.

Try this.

Your search producing above output | eval key=1 | untable key name score | fields - key

[pradeepkumarg]

Transpose it is..

...| transpose

http://docs.splunk.com/Documentation/Splunk/6.1.3/SearchReference/Transpose

[chrismok]

Hi gpradeepkumarreddy,

This command do not able to make my result.