Synopsis
Changes the display name names and/or format of specified columns in the or formats of column(s) in the summary table resulting from the complex search(es) preceding the pipe character.
Syntax
display [Result_Column_Name] (as [New _Column_Name]) (in [Format_Type] format) (["Input_Unit"],)(["Output_Unit"]) (, [RESULT_COLUMN_NAME] (as [NEW_COLUMN_NAME] )…)
...
Description: The name of the column header in the resulting events whose name and/or format you summary table resulting from the complex search, whose name, format, or output unit you want to change in the resulting summary table.
Optional Arguments
New_Column_Name
Syntax: <character string>
Description: The new display name of the of the column header displayed in the summary table.
Format_Type
Syntax: <character string>
Description: The new The display format of the column header values . This can be any of the following formats:
...
in the summary table. See Format.
"Output_Unit"Syntax: Volume Units - B, KB, MB, GB; Time Units: microsec, ms, sec, min, hour, day
...
Description: The output units of the column values.
"Input_Unit"Syntax: Volume Units - B, KB, MB, GB
...
; Time Units: microsec, ms, sec, min, hour, day
Description: The output units of the column values.
Description
For each event that has the specified column name, does the following, as specified:
...
* log.access | count | display Column_X as Column_Y
...
* in log.access | count , avg Bytes Sent | group by url | display avg as Average Bytes in volume formatShow the number of log access events that have Column_X, and in the table change the display name of Column_X to Column_Y.
...
Assumes that the value in Volume_Interval_Column is in bytes, and displays it in Output_Unit format. Optional volume units are B, KB, MB, and GB