Related Answers
Download topic as PDF
Generate a table
To generate a table, write a search that includes a transforming command. From the Search page, run the search and select the Statistics tab to view and format the table.
You can use the table command in a search to specify the fields that the table includes or to change table column order.
Search examples
- Transforming search
This search uses thecharttransforming command.index = _internal | chart avg(bytes) over sourcetypeThe search generates a table with two columns.
- Transforming search with the table command
This search generates a table withaction,host, andcountcolumns.index = _internal | stats count by action, host
To change the columns that appear in the table or to change column order, add the
tablecommand to this search. For example, add| table host countto generate a table with only thehostandcountcolumns.index = _internal | stats count by action, host | table host count
Table sparklines
Sparklines show data patterns or trends in a results set. To generate a table sparkline, usestats or chart with the sparkline function in a search.
Sparkline width is determined by default data binning. You can adjust data binning as a parameter of the sparkline command.
For more information, see Add Sparklines to your search results in the Search Manual.
|
PREVIOUS Table visualization overview |
NEXT Format table visualizations |
This documentation applies to the following versions of Splunk® Enterprise: 6.5.0, 6.5.1, 6.5.1612 (Splunk Cloud only), 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5.9, 6.5.10, 6.6.0, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.6.7, 6.6.8, 6.6.9, 6.6.10, 6.6.11, 6.6.12, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.10, 7.0.9, 7.0.11
Feedback submitted, thanks!