Splunk Search

How do you reference a field value as a field to use in a table?

michaelrosello
Path Finder

So I have a field day_Today=Friday

Now I want to use the value of day_Today as a field in my table

| table Date value(day_Today)

the result of this should be

| table Date Friday

Tags (3)
0 Karma

493669
Super Champion

The table command generates a table with the field name mentioned displayed as a column name and their value in below subsequent rows..
so if you have Date and day_Today as field name and you want to display their values, then simply write as —

...| table Date day_Today

Note- field names are case sensitives

0 Karma

michaelrosello
Path Finder

I want to use field value as column name.

0 Karma

493669
Super Champion

try xyseries command-
http://docs.splunk.com/Documentation/Splunk/7.1.3/SearchReference/Xyseries

| xyseries Date day_Today <fieldname which you want to show under day_Today>
0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...