How to reorganize a table - Splunk Community

Splunk Search

Hello,

I have a table like that :

customer	prod_1	prod_2	prod_3
customer_1		green
customer_2	red		orange

and I would like to count customer by product to get a table like this :

product	count	custumer
prod_1	1	customer_2
prod_2	1	customer_1
prod_3	1	customer_2

Is it possible ?

Hi @mah,

please try something like this:

your_search
| stats count BY product customer
| table product count customer

Ciao.

Giuseppe

What search produced the first table?

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers, So you searched, “what is the name of the usb key inserted by bob smith?” Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register Is your ...