Splunk Search

Table creation with desired fields

sphiwee
Contributor

 

I have the query below, but i i dont want the services to like this.. how can i get the names of the services to be visualized on the headers having the status running showing under each service. and the server to be in the far left.

sphiwee_1-1594323294882.png


I want it to be like this with the services being where the blue colour is and on the left to be the server so i can have servers , services and status of all my servers

sphiwee_2-1594323394192.png

 

 

Labels (3)
Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Try adding this to the end of your query.

| xyseries server Services Status

Replace "server" with the name of the field that holds the server names. 

---
If this reply helps you, Karma would be appreciated.

sphiwee
Contributor

server = host but i'm not getting any data back, says "no results"

0 Karma
Get Updates on the Splunk Community!

Combine Multiline Logs into a Single Event with SOCK - a Guide for Advanced Users

This article is the continuation of the “Combine multiline logs into a single event with SOCK - a step-by-step ...

Everything Community at .conf24!

You may have seen mention of the .conf Community Zone 'round these parts and found yourself wondering what ...

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...