Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
947 results
Sorted by:
3 weeks ago
hello
I transpose events like this
| eval time=strftime(_time,"%H:%M")
| sort time
| fields - _time _span _origtime _events
| transpose 0 header_field=time column_name=KPI i...
- Tags:
- other
Labels
- Labels:
-
other
Show results in replies (9)
-
...efore your transpose command?
-
but I have a field time.... And like I said it works normaly after a little time so it's very stra...
-
Please post an image of the search results before the transpose
-
https://www.cjoint.com/c/LDzpRnxcFYj
-
...ithout the transpose command?
-
-
...he transpose then that is why you get 'row X...' To diagnose this, you will need to run that m...
-
Ok I am going to do this but i dont understand why most of the time it works well with the same sea...
-
Your issue is that your first search is not finding any events Try setting your search time: <...
03-18-2022
05:02 AM
hello
I use a transpose command in order to have _time field displayed in column instead row
First question :
how to delete the header?
second question :
I was doing a c...
- Tags:
- other
Labels
- Labels:
-
other
4 weeks ago
Hello
As you can see in my search I transpose time in my header field
| eval time=strftime(_time,"%H:%M")
| sort time
| fields - _time _span _origtime _events
| fillnull value=0
| transpose...
Labels
- Labels:
-
other
Show results in replies (8)
-
I think the problem comes from the _time field being empty. However, I can't see from your search w...
-
Can you show an example of the table before the transpose command?
-
hi here is
-
Your _time field is empty. Why is that?
-
I have just forgotten to delete this pièce of code for my exemple sorry | eval time=strftime(_time...
-
OK so now what does the table look like before the transpose?
-
here is as you can see, fillnull works only when there is a result > 0 &nb...
-
What was the search which produced this table?
04-05-2022
10:45 PM
a month ago
...equest 20 B 200 OK 110 B 400 Bad Request 15 B 500 Internal Server Error 5 C 200 OK 85 C 400 Bad Request 25 C 500 Internal Server Error 30 But I want to get a transpose...
Labels
- Labels:
-
table
a month ago
After issuing a transpose command on my bar chart visualization I can't configure conditional drilldowns.
I tried using the untable command followed by the xyz series command and no luck. this i...
Labels
- Labels:
-
chart
-
drilldown
-
simple XML
06-25-2020
09:36 AM
{ "DbMaintenanceDailyRoutineSummary" : { "success" : [ { "server-002" : [ { "vacuum" : true, "analyze" : true, ...
Labels
- Labels:
-
field extraction
-
other
-
subsearch
-
table
04-25-2018
01:08 AM
1 Karma
...alues(request.detail.apiContext) as api by requestid
| search (api="benefits" OR api="employment" OR api="income")
| stats count by afin, api
| transpose header_field=api
I'd like the output t...
splunk-transpose.jpg (1 KB)
