Splunk Search

unit along with fieldname

smolcj
Builder

Hi all
is there any option in splunk, so that we can list the table contents and their units along with the table name (such as seconds,percentage,hours) etc....

field1 time(secs)
blabla 1111
bla    2222

in other table instead of secs it will be percentage.. something similar to this
please help
thank you

Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Rename should do the job:

search... | table... | rename field as time(secs)

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

Rename should do the job:

search... | table... | rename field as time(secs)

smolcj
Builder

edited mu question with some more info,, please go through and help me

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Do you have a before/after example of what you want to change?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...