Splunk Search

Table invert X Y axis

manudbc
Explorer

Hello,
I want to change de X and Y axis in a table
shown now:
alt text

Desirable show:

date:<value>
date_hour:<value>
date_mday:<value>
date_minute:<value>
date_month:<value>
date_second:<value>
date_wday:<value>
date_year:<value>
date_zone:<value>
eventtype:<value>
.
.
.
0 Karma

somesoni2
Revered Legend

Try like this

your current search giving above output
| eval temp=1
| untable temp fieldName fieldValue
| field - temp
0 Karma

skoelpin
SplunkTrust
SplunkTrust

transpose should do the trick

Add it at the end of your search

... | transpose

http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/Transpose

0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...