Hello,
I want to change de X and Y axis in a table
shown now:
Desirable show:
date:<value>
date_hour:<value>
date_mday:<value>
date_minute:<value>
date_month:<value>
date_second:<value>
date_wday:<value>
date_year:<value>
date_zone:<value>
eventtype:<value>
.
.
.
Try like this
your current search giving above output
| eval temp=1
| untable temp fieldName fieldValue
| field - temp
transpose
should do the trick
Add it at the end of your search
... | transpose
http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/Transpose