Splunk Dev

Could you make a table over or by the fields being represented or the statistical functions being used?

DouglasSmithers
Engager

With the "chart" or other functions, could you make a table over or by the fields being represented or the statistical functions being used? The result of which I'm thinking would have rows saying "min," "avg," "sum," and so on, or they would have the same headers for the columns with the field being summarised as the title of the other axis. Is this possible in Splunk?

Tags (1)
0 Karma

jkat54
SplunkTrust
SplunkTrust

Try these commands to see if they are what you’re looking for:

transpose
untable
xyseries

You can find instructions on using each here:

https://docs.splunk.com/Documentation/Splunk/7.1.2/SearchReference/

0 Karma

niketn
Legend

@DouglasSmithers please add more details to your use case. Also if you can add a screenshot of what you have vs mock up of what you need, that would help us assist you better.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...