Can we have a Splunk result appear like this.
Header 1 . Header 2 Header 3 . Header 4
PPID -1
Column 1. Column 2. Column 3
PPID - 2
Column 1. Column 2. Column 3
Hello @vijayakumarkb,
can you please be more precise. ARe the Header1, ...Header 4 static values, or the result of the SPL search.
The reason I am asking is that, in case the fields are static, this can be done quite easily with a html dashboard.
Otherwise, I need mode details to have a look at your question.
Hello Poete,
Header 1 . Header 2 Header 3 . Header 4 are static values
PPID -1 and PPID -1 are dynamic values. it should come from a query.
index=_int <> - will give the PPID values, we have to iterate the PPID values and based on each PPID values column 1 column 2 will be generated