Splunk Search

help to display field header in ordinate axis

jip31
Motivator

hi

The stats command below allows me to display data in a table panel

I would like to display the fields header in an ordinate axis instead an abcissa axis

could you help me please??

 

| stats last(Site) as "Geolocation site", last(Building) as "Geolocation building", last(DESCRIPTION_MODEL) as Model, last(OS) as OS by USERNAME

 

 

Tags (1)
0 Karma
1 Solution

to4kawa
Ultra Champion

 

| makeresults
| eval _raw="A B C D
1 2 3 4"
| multikv
| table A B C D

| eval header="count"
| transpose 0 column_name=cols header_field=header

 

try transpose

View solution in original post

0 Karma

niketn
Legend

@jip31 can you add some sample data for current output and expected output?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

jip31
Motivator

Sort I cant share datas

But instead having the field header at the bottom

A B C D

1 2 3 4

I need the field header on the left

A 1

B 2

C 3

D 4

0 Karma

to4kawa
Ultra Champion

 

| makeresults
| eval _raw="A B C D
1 2 3 4"
| multikv
| table A B C D

| eval header="count"
| transpose 0 column_name=cols header_field=header

 

try transpose

0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...