... |rename General.SetupViews as Modes|eval mode=split(Modes," ")|eval name1=mvindex(mode,0) | eval name2=mvindex(mode,1) | eval name3=mvindex(mode,2) | eval name4=mvindex(mode,3) | spath | table SetupDetail.name1.IN2OUT as IN2OUT
Use a field in table
by specifying the exact field name or a name pattern.
table name1 name2 name3 name4
Or
table name*
The table
command does not have an as
option. Use a separate rename
.
rename SetupDetail.name1.IN2OUT as IN2OUT | table IN2OUT
@pratyushd,
table SetupDetail.name1.IN2OUT as IN2OUT
doesn't seem to be correct.
|rename General.SetupViews as Modes|eval mode=split(Modes," ")|eval name1=mvindex(mode,0)
| eval name2=mvindex(mode,1) | eval name3=mvindex(mode,2) | eval name4=mvindex(mode,3)
| spath | rename SetupDetail.name1.IN2OUT as IN2OUT|table name1,name2,name3,name4,IN2OUT
Hi,
the command SetupDetail.name1.IN2OUT itself does not seem to work. It is not able to extract the value of name1 but puts name1 instead the value i.e mvindex(mode,1) in the option SetupDetail.name1.IN2OUT
Thanks for the help 🙂
Do you have some sample events and search ?