Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Rearranging the columns

$
0
0
![alt text][1]I want my to rearrange the columns of my query in a particular order as shown below ,but due to dates (01-jun-2017) ,the first part of the query is working fine but other columns are coming after dates(01-jun-2017,-2-jun-2017).So I am rearranging them like 0.1_MTD_last_mon,0.2_CSI_pre_year .Help me sorting the table columns without using this 0.1,0.2 prefixes. Location MTD_Pre_mon MTD_last_mon CSI_pre_year CSI_last_year 01-jun-2017 02-jun-2017 03-jun-2017 abc 1 2 5.5 6.6 90 88 99 |chart sum(MTD) as MTD_Present_Month by Location |chart sum(MTD) as 0.1_MTD_Last_Month by Location |chart values(CSI) as 0.2_CSI_Present_Year by Location |bin span=1d _time |convert ctime(_time) timeformat="%d-%b-%y %A" |chart sum(daily) over Location by _time limit=0 These are the little parts of the query.The whole query is very long with different indexes. [1]: /storage/temp/212581-untitled2.png

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>