Unsupported Splunk command pivot.

anuj — Mon, 15 Jun 2026 08:25:29 GMT

Hello Team,

Is there any workarounds or way to convert Splunk query using `| pivot`

Example

| pivot Tutorial HTTP_requests count(HTTP_requests) AS "Total Requests"

Any way to convert this query?

Re: Unsupported Splunk command pivot.

sujit_k_singh — Sun, 14 Jun 2026 23:51:30 GMT

HI @anuj

In DQL, there is no direct equivalent of the | pivot command, but the same results can be achieved using summarize command combined with fetch.

fetch logs
| filter <your_matching_condition>
| summarize `Total Requests` = count()

No Data Models in DQL: Splunk's pivot relies on pre-defined data models. In Dynatrace, data is stored in buckets (like logs, events, metrics) and queried directly — there's no intermediate "data model" abstraction.
summarize command is the equivalent of Splunk's aggregation functions within pivot. It supports count(), sum(), avg(), min(), max(), etc.

Thanks,

Sujit

topic Re: Unsupported Splunk command pivot. in DQL

Unsupported Splunk command pivot.

Re: Unsupported Splunk command pivot.