Hi,
I have the below table:
File_System Disk_Usage
\logs 41
\opt 73
\var 69
\apps 48
Here I want to create a trellis view of the different "File_System" showing the "Disk_Usage"under a single panel(eg. xyz). Can someone please help me create the query to get the trellis view in the desired manner.
Thank you.
Greetings Mrig342,
Here's a run-anywhere search that should get you what you want. You'll just have to update it to fit your data. It's important that you end the search with a stats command.
| makeresults | eval File_System = "\logs", Disk_Usage = "41"
| append [ | makeresults | eval File_System = "\opt" , Disk_Usage = "73" ]
| append [ | makeresults | eval File_System = "\var" , Disk_Usage = "69" ]
| append [ | makeresults | eval File_System = "\apps", Disk_Usage = "48" ]
| stats max(Disk_Usage) by File_System