- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Naveenkumar
Engager
09-26-2024
07:49 AM
Hi Splunk,
I have a table like below
Component Green Amber Red
Resp_time 0 200 400
5xx 0 50 100
4xx 0 50 100
I want to combine them to produce single row like below
Resp_time_Green Resp_time_Amber Resp_time_Red 5xx_Green 5xx_Amber 5xx_Red 4xx_Green 4xx_Amber 4xx_Red
0 200 400 0 50 100 0 50 100
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer

SplunkTrust
09-26-2024
08:01 AM
| untable Component Level count
| eval Component_Level=Component."_".Level
| table Component_Level count
| transpose 0 header_field=Component_Level
| fields - column
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Naveenkumar
Engager
09-27-2024
10:59 AM
Thanks! Works like a charm!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
isoutamo

SplunkTrust
09-28-2024
03:59 AM
Please accept that solution as it works.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer

SplunkTrust
09-26-2024
08:01 AM
| untable Component Level count
| eval Component_Level=Component."_".Level
| table Component_Level count
| transpose 0 header_field=Component_Level
| fields - column
