In order to visual a data table with 4 columns: time, resource1, resource2, duration. I know who to do this with data coming from different events. However in my case, all the data is stored in a single performance metric splunk event. The event would look like the blob below where measureStart node contains the start time of these tasks, and the measure node contains the durations of these tasks Splunk Event: { measureStart: { "super_Task1: mini task1": 2021-11-12T02:50:05.430Z, "super_Task1: mini task2": 2021-11-12T02:50:06.430Z, "super_Task2: mini task1": 2021-11-12T02:50:07.430Z, }, measures: { "super_Task1: mini task1": 50, "super_Task1: mini task2": 100, "super_Task2: mini task1": 80, } } I would like to produce a table that looks like this time supertasks tasks duration 2021-11-12T02:50:05.430Z super_Task1 point1 50 2021-11-12T02:50:06.430Z super_Task1 point2 100 2021-11-12T02:50:07.430Z super_Task2 point1 80 thank you very much!
... View more