Splunk Search

Is it possible to create an html unorder (bullet) list for each row of a table output?

timgren
Path Finder

Id like to create table of results, and convert each row into an unordered bullet list using html. 

Such as: 

| table result   (which has n number of results) 
Then in the output, i want to show each in an unordered bullet list.

<html>
<ul>
    <li> row.result.1
    <li> row.result.2
    <li> row.result.3
etc... 
</ul>
</html> 

Possible? 


Labels (1)
Tags (2)
0 Karma

livehybrid
Ultra Champion

Hi @timgren 

Something like this?

| eval row="<li>".result."</li>"
| stats values(row) as html_list 
| eval html_list = "<ul>".mvjoin(html_list, "")."</ul>" 
| table html_list

livehybrid_0-1746547974884.png

Full example

| makeresults count=3 
| streamstats count
| eval result = "result".count 
| table result
| eval row="<li>".result."</li>"
| stats values(row) as html_list 
| eval html_list = "<ul>".mvjoin(html_list, "")."</ul>" 
| table html_list

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma
Get Updates on the Splunk Community!

Pro Tips for First-Time .conf Attendees: Advice from SplunkTrust

Heading to your first .Conf? You’re in for an unforgettable ride — learning, networking, swag collecting, ...

Raise Your Skills at the .conf25 Builder Bar: Your Splunk Developer Destination

Calling all Splunk developers, custom SPL builders, dashboarders, and Splunkbase app creators – the Builder ...

Hunt Smarter, Not Harder: Discover New SPL “Recipes” in Our Threat Hunting Webinar

Are you ready to take your threat hunting skills to the next level? As Splunk community members, you know the ...