Table of Contents


table command returns a table with table columns that are separately defined. The table columns are shown in the same order that one has listed in the table command arguments.


You can form new table columns without a dataset if you use makeresults and eval with table.

| makeresults count=1
| eval name="John"
| eval surname="Doe"
| table name, surname
example of table command without a dataset

With a dataset, you can extract information with spath and then show new columns with table.

| spath
| table _time, longitude, latitude, rainfall_rate, wind_speed
example of table command with a dataset
Currently, default table columns that are used with table will hide custom table columns. They can be separately toggled visible from the column visibility drop-down menu. This kind of behavior will be fixed before the community release.