Unsupported Splunk command pivot.

[anuj]

Hello Team,

Is there any workarounds or way to convert Splunk query using `| pivot`

Example 

| pivot Tutorial HTTP_requests count(HTTP_requests) AS "Total Requests" 

Any way to convert this query? 

[sujit_k_singh]

HI @anuj 

In DQL, there is no direct equivalent of the | pivot command, but the same results can be achieved using summarize command combined with fetch.

fetch logs
| filter <your_matching_condition>
| summarize `Total Requests` = count()

No Data Models in DQL: Splunk's pivot relies on pre-defined data models. In Dynatrace, data is stored in buckets (like logs, events, metrics) and queried directly — there's no intermediate "data model" abstraction.
summarize command is the equivalent of Splunk's aggregation functions within pivot. It supports count(), sum(), avg(), min(), max(), etc.

Thanks,

Sujit