My search:
index="systems" sourcetype="systems_xml" systemdata.administration.system-id="123456" systemdata.administration.server-id="*" | fields systemdata.systemresponse.* | fields - _* | transpose
I would like to know how to get it so that the row header shows me the value of a field.
Right now it looks like this:
-------------------------------------------------------
| | column | row 1 | row 2 |
-------------------------------------------------------
| 1 | systemdata.systemresponse.item1 | 1 | 3 |
-------------------------------------------------------
| 2 | systemdata.systemresponse.item2 | 2 | 2 |
-------------------------------------------------------
| 3 | systemdata.systemresponse.item3 | 4 | 4 |
-------------------------------------------------------
| 4 | systemdata.systemresponse.item4 | 4 | 1 |
-------------------------------------------------------
I would like something like where the "row X" is renamed to a field value:
---------------------------------------------------------
| | column | 255435 | 255514 |
---------------------------------------------------------
| 1 | systemdata.systemresponse.item1 | 1 | 3 |
---------------------------------------------------------
| 2 | systemdata.systemresponse.item2 | 2 | 2 |
---------------------------------------------------------
| 3 | systemdata.systemresponse.item3 | 4 | 4 |
---------------------------------------------------------
| 4 | systemdata.systemresponse.item4 | 4 | 1 |
---------------------------------------------------------