Hi,
I have a used a inputcsv command, which looks on splunk as below
The PARAMETER TIMESTAMP and VALUE are the headers. I want to rearrange the table to show it in following manner
I have tried various commands but didn't succeeded.My most important concern is not to use any static term/variable in TIMESTAMP as it will go on increasing such as 8:00,9:00,10:00,11:00,12:00,13:00,14:00....and so on.
Kindly help...!!
Try this
Your base search (inputcsv) | chart first(VALUE) over PARAMETER by TIMESTAMP
Try this
Your base search (inputcsv) | chart first(VALUE) over PARAMETER by TIMESTAMP
Thanks a lot somesoni2