Splunk Search

unit along with fieldname

smolcj
Builder

Hi all
is there any option in splunk, so that we can list the table contents and their units along with the table name (such as seconds,percentage,hours) etc....

field1 time(secs)
blabla 1111
bla    2222

in other table instead of secs it will be percentage.. something similar to this
please help
thank you

Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Rename should do the job:

search... | table... | rename field as time(secs)

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

Rename should do the job:

search... | table... | rename field as time(secs)

smolcj
Builder

edited mu question with some more info,, please go through and help me

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Do you have a before/after example of what you want to change?

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...