Hello dear Splunk experts! I've stuck with one search and can't figure how to do this. Did a lot of searching here on this friendly community but couldn't find the answer despite that saw a lot of similar tasks with solutions. I have a dataset like this: sg1 sg1_approval sg2 sg2_approval sg3 sg3_approval value1 approved value2 not approved value3 delayed And I want to get something like this: sg sg_value sg_approval sg1 value1 approved sg2 value2 not approved sg3 value3 delayed What is the best way to achieve this? I've found some examples around transpose, eval or stats functions but these didn't solve my task completely. And to add a bit of complexity to this task - how to calculate sum of particular cells in rows with particular values of columns. I have this dataset: sg1 sg1_approval sg1_now sg2 sg2_approval sg2_now sg3 sg2_now sg3_approval value1 approved 4 value2 not approved 2 value3 5 delayed value2 not approved 3 value3 approved 5 value4 1 approved And want to extract it as: sg_approval sg_now approved 10 not approved 5 delayed 5 So that sg_now column contains sum of all values in sg1_now, sg2_now and sg3_now sorted by sg1_approval, sg2_approval and sg3_approval. Thank you very much in advance! Regards
... View more