Multi level table

[jackreeves]

Hi,

I am trying to build a multi-level pivot table in SPLUNK, where you can have multiple rows under one another like you can in an excel pivot table. Is this possible?

Thanks

[cmerriman]

This is not a feature that is available in Splunk today. The closest you can get is to concatenate the column headers and have one row of headers. something laid out like below, where you have all of the values of two fields in the same row.

row1_1 - row2_1 | row1_1 - row2_2 | row1_2 - row2_1....