I need to display 2 different value in a single value cell.
Here is a sample of the current dashboard, split by code A,C,T,and S and minimum delay in minutes, which zero minute delay in delivery of these code types.
| A | C |T | S|
| 0 |0 | 0 | 0|
Want to display the severity level of the code (where there is only 2 levels...HC=high critical or CR=critical-, such as below.
The severity code for each code is a constant and doesn’t change .
The update dashboard would be:
| A ,HC|C,HC|T,HC| S,CR|
| 0 |0 | 0 | 0|
@noviceinsplunk ,
You can concatenate the fields to get the values appended.
For eg. eval A=A."HC",C=C."HC"
etc.
And you can change the field names using rename
For e.g.if your severity level for HC=2 and CR=1 then,
your current search |eval A=A.",2",C=C.",2",T=T.",2",S=S.",1"
|rename A as "A,HC",C as "C,HC",T as "T,HC",S as "S,CR"
@noviceinsplunk ,
You can concatenate the fields to get the values appended.
For eg. eval A=A."HC",C=C."HC"
etc.
And you can change the field names using rename
For e.g.if your severity level for HC=2 and CR=1 then,
your current search |eval A=A.",2",C=C.",2",T=T.",2",S=S.",1"
|rename A as "A,HC",C as "C,HC",T as "T,HC",S as "S,CR"
That worked. Thanks.
Glad to know. Kindly accept as answer if you dont have further questions on this @noviceinsplunk