Splunk Search

Why does the time field show up in the transpose header?

jip31
Motivator

hello

I use a transpose command in a table panel

 

 

| eval time=strftime(_time,"%H:%M") 
| sort time 
| fields - _time _span _origtime 
| transpose 0 header_field=time column_name=KPI include_empty=true

 

 

 But randomly, instead having the time field in the header, I have row1, row2, row3....

jip31_0-1649223867756.png

what is wrong please?

 

Labels (1)
Tags (1)
0 Karma
1 Solution

gcusello
Esteemed Legend

Hi @jip31,

please try tu use transpose after a grouping command as stats, something like this:

your_search
| bin _time span=1m
| stats values(KPI) AS KPI BY _time
| transpose 0 header_field=_time column_name=KPI include_empty=true

in your search, you have too many fields and too many values all equal because you grouped by minute.

Ciao.

Giuseppe

View solution in original post

0 Karma

gcusello
Esteemed Legend

Hi @jip31,

please try tu use transpose after a grouping command as stats, something like this:

your_search
| bin _time span=1m
| stats values(KPI) AS KPI BY _time
| transpose 0 header_field=_time column_name=KPI include_empty=true

in your search, you have too many fields and too many values all equal because you grouped by minute.

Ciao.

Giuseppe

0 Karma

jip31
Motivator

hi thanks even if i use transpose after a grouping command too;-)

0 Karma

gcusello
Esteemed Legend

Hi @jip31,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...