Multi level table

jackreeves · ‎04-30-2018

Hi,

I am trying to build a multi-level pivot table in SPLUNK, where you can have multiple rows under one another like you can in an excel pivot table. Is this possible?

Thanks

cmerriman · ‎04-30-2018

This is not a feature that is available in Splunk today. The closest you can get is to concatenate the column headers and have one row of headers. something laid out like below, where you have all of the values of two fields in the same row.

row1_1 - row2_1 | row1_1 - row2_2 | row1_2 - row2_1....

Multi level table

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Thanks for the Memories: .conf26 Took Learning to New Heights

Best Practices: Splunk auto adjust pipeline queue

Splunk Auto Ingestion Parallel Pipeline Scaling

Join the Conversation

Multi level table

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Thanks for the Memories: .conf26 Took Learning to New Heights

Best Practices: Splunk auto adjust pipeline queue

Splunk Auto Ingestion Parallel Pipeline Scaling