Need to create trellis view

[Mrig342]

Hi,

I have the below table:

File_System           Disk_Usage

\logs                             41

\opt                              73

\var                               69

\apps                           48

Here I want to create a trellis view of the different "File_System" showing the "Disk_Usage"under a single panel(eg. xyz). Can someone please help me create the query to get the trellis view in the desired manner.

Thank you.

[jacobpevans]

Greetings Mrig342,

Here's a run-anywhere search that should get you what you want. You'll just have to update it to fit your data. It's important that you end the search with a stats command.

           | makeresults | eval File_System = "\logs", Disk_Usage = "41"
| append [ | makeresults | eval File_System = "\opt" , Disk_Usage = "73" ]
| append [ | makeresults | eval File_System = "\var" , Disk_Usage = "69" ]
| append [ | makeresults | eval File_System = "\apps", Disk_Usage = "48" ]
| stats max(Disk_Usage) by File_System

jacobpevans_0-1612879875219.png