- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to transpose or untable one column from table with 3 columns?
sarit_s
Communicator
09-21-2023
04:46 AM
Hello
I have a table with 3 columns :
Domain | Environemnt | %of deployments |
hello | qa | 12 |
hello1 | dr | 13 |
hello2 | prod | 13 |
hello3 | dev | 15 |
And I would like to achieve this..
Domain | qa | dr | dev | prod |
hello | 12 | 13 | 14 | 15 |
hello1 | 1 | 2 | 3 | 4 |
hello2 | 3 | 2 | 4 | 6 |
hello3 | 1 | 3 | 5 | 7 |
While the numbers in the cells are the % of deployments for each environment and domain
I've tried this but it is not working as expected :
| eventstats count by SERVERS
| eventstats dc(SERVERS) as Total_Servers by Domain Environment
| eventstats dc(SERVERS) as Total_Servers
| eval "% Of deployments by domain&env" = (Deployed_Servers/Total_Servers)*100
| search Sprint!=*required AND Sprint!=*deleted* AND Sprint!="?"
| eval SH_{Environment}=count
| eventstats values(SH_*) as * by Domain
| dedup Environment Domain
| table Domain SH* "% Of deployments by domain&env"
| rename SH_dr as DR SH_production as Production SH_qa as QA SH_staging as Staging
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yuanliu

SplunkTrust
09-21-2023
07:16 PM
Are you just making up numbers in the example? You have four numbers in first table, but 16 in the second. There is no logic between the two.
