Splunk Search

how to transpose ?

sajumulakkal
New Member

field1,field2,field3
1, a, b
1, b, c
1, c, d
2, r, s
2, s, k
2, k, l
2, l, m

field 1 is the key

based on above data, I need to as following manner

1 a->b b->c c->d
2 r->s s->k k->l l->m

If any one have an idea, please share to me..

Tags (1)
0 Karma
1 Solution

diogofgm
SplunkTrust
SplunkTrust

Try this:

your search | eval changes = field2+"->"+field3 | stats values(changes) as changes by field1
------------
Hope I was able to help you. If so, some karma would be appreciated.

View solution in original post

0 Karma

diogofgm
SplunkTrust
SplunkTrust

Try this:

your search | eval changes = field2+"->"+field3 | stats values(changes) as changes by field1
------------
Hope I was able to help you. If so, some karma would be appreciated.
0 Karma

sajumulakkal
New Member

Thanks your solution/answer is excellent. It worked for me..
once again ... thanks to diogofgm.

0 Karma

sajumulakkal
New Member

Thanks diogofgm ... your solution/answer is excellent.. it worked for me...

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...