Remove duplicate columns - column which have single unique value

[bhavesh0124]

Hi, 

I want to get rid of columns which have single unique value. There could be multiple columns showing this behavior. 

Test	Value1	Value2	Value3	Value4
Test1	2	b	a	7
Test2	1	c	a	7

I want to get rid of columns "Value3" and "Value4" since they have only one unique value across.

@gcusello @ITWhisperer @scelikok @PickleRick 

[ITWhisperer · Accepted solution]

Depending on the size of your data set, you could try something like this

| appendpipe
    [| stats values(*) as *
    | eval Test="ALL"]
| transpose 0 column_name=name header_field=Test
| where mvcount(ALL) > 1
| fields - ALL
| transpose 0 column_name=Test header_field=name

[bhavesh0124]

Works perfectly, thanks

[gcusello]

Hi @bhavesh0124,

sorry bu it isn't possible: Splunk isn't Excel in which you can collapse two cells in one.

Ciao.

Giuseppe