A quick example
Once you have selected a data model (in our case Aviation Games), from the Select an object page, we can choose Processing Errors, which will land us on the New Pivot (Pivot Editor):
![](https://static.packt-cdn.com/products/9781784391607/graphics/B03650_04_27.jpg)
To build a simple pivot, we can take the following quick steps:
Add/verify the filters.
Remember, All time is the default; this will include all results found over all time. You can click on the pencil and amend this filter to be based upon any of Splunk's Presets or a specific Date Range:
For this example, we'll just leave the default selection.
Configure the Split Rows
Directly under Filters is Split Rows. For Split Rows, I've selected date_month:
After making the selection, you are able to provide additional settings for the selected row:
I've provided a new name (Label) for the row (
my_Month
) and left the defaults for Sort, Max Rows (to display), and Totals.Configure the Split Columns
Moving to the upper-right side of the Pivot page, we have Split Columns. For Split Columns, I've selected date_mday...