Skip to content

Latest commit

 

History

History
69 lines (50 loc) · 2.04 KB

File metadata and controls

69 lines (50 loc) · 2.04 KB

transpose

The transpose command outputs the requested number of rows as columns, converting each result row into a corresponding column of field values.

Syntax

The transpose command has the following syntax:

transpose [int] [column_name=<string>]

## Parameters

The `transpose` command supports the following parameters.

| Parameter | Required/Optional | Description |
|---|---|---|
| `<int>` | Optional | The number of rows to transform into columns. Default is `5`. Maximum is `10000`. |
| `column_name=<string>` | Optional | The name of the first column to use when transposing rows. This column holds the field names. |

## Example 1: Transposing a severity breakdown

The following query transposes a severity breakdown into a columnar format. This is useful for creating compact summary views:

```ppl
source=otellogs
| stats count() as log_count by severityText
| sort severityText
| transpose

The query returns the following results:

fetched rows / total rows = 2/2
+--------------+-------+-------+-------+-------+-------+
| column       | row 1 | row 2 | row 3 | row 4 | row 5 |
|--------------+-------+-------+-------+-------+-------|
| log_count    | 3     | 7     | 6     | 4     | null  |
| severityText | DEBUG | ERROR | INFO  | WARN  | null  |
+--------------+-------+-------+-------+-------+-------+

Example 2: Transposing a limited number of rows

The following query transposes only the first three severity levels:

source=otellogs
| stats count() as log_count by severityText
| sort severityText
| transpose 3

The query returns the following results:

fetched rows / total rows = 2/2
+--------------+-------+-------+-------+
| column       | row 1 | row 2 | row 3 |
|--------------+-------+-------+-------|
| log_count    | 3     | 7     | 6     |
| severityText | DEBUG | ERROR | INFO  |
+--------------+-------+-------+-------+

Limitations

The transpose command converts a specified number of rows into columns. If fewer rows are available, the missing values are represented as null columns.