https://community.splunk.com/t5/Splunk-Enterprise/How-to-get-the-values-of-a-particular-fields/m-p/638314#M15916 <LI-CODE lang="markup">| spath input=request</LI-CODE> Mon, 03 Apr 2023 07:18:05 GMT ITWhisperer 2023-04-03T07:18:05Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-get-the-values-of-a-particular-fields/m-p/638311#M15915 <P>Like how to extract the values of country and channel id for the dashboard, right when I'm pulling it. I'm getting both Country id and channel id in one column, but I want to segregate both individuals columns in dashboards.</P> <P>I've below sample event type:&nbsp;Path= /Verify/ endpoint request={"userId":"xxxxxxxxxxxxxxxxx","country":"AB","channelId":"111111","ssnNumber":null,"operatorId":"test"} response={"result":"ERROR","error_reason":"NO_DATA_ERROR","error_category":"APPLICATION","error_text":"No for user exist","error_rc":444}</P> <P>&nbsp;</P> <P>Please suggest..</P> Tue, 04 Apr 2023 01:53:12 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-get-the-values-of-a-particular-fields/m-p/638311#M15915 eprpradeep 2023-04-04T01:53:12Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-get-the-values-of-a-particular-fields/m-p/638314#M15916 <LI-CODE lang="markup">| spath input=request</LI-CODE> Mon, 03 Apr 2023 07:18:05 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-get-the-values-of-a-particular-fields/m-p/638314#M15916 ITWhisperer 2023-04-03T07:18:05Z