https://community.splunk.com/t5/Splunk-Enterprise/how-to-get-string-values-into-column-values-dynamically/m-p/507827#M2462 <P>hi,</P><P>i have data like below. i want to string into column values then need to join with my query.</P><P>System&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;effected Region</P><P>a:b:c;d;e;f&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; India</P><P>i need like below.</P><P>system&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;effected Region</P><P>a&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;India</P><P>b&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;India</P><P>c&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;India</P><P>d&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;India</P><P>e&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;India</P><P>f&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;India</P><P>&nbsp;</P><P>Thanks in advance</P> Tue, 07 Jul 2020 12:56:13 GMT shivareddysompa 2020-07-07T12:56:13Z https://community.splunk.com/t5/Splunk-Enterprise/how-to-get-string-values-into-column-values-dynamically/m-p/507827#M2462 <P>hi,</P><P>i have data like below. i want to string into column values then need to join with my query.</P><P>System&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;effected Region</P><P>a:b:c;d;e;f&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; India</P><P>i need like below.</P><P>system&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;&nbsp;effected Region</P><P>a&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;India</P><P>b&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;India</P><P>c&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;India</P><P>d&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;India</P><P>e&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;India</P><P>f&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;India</P><P>&nbsp;</P><P>Thanks in advance</P> Tue, 07 Jul 2020 12:56:13 GMT https://community.splunk.com/t5/Splunk-Enterprise/how-to-get-string-values-into-column-values-dynamically/m-p/507827#M2462 shivareddysompa 2020-07-07T12:56:13Z https://community.splunk.com/t5/Splunk-Enterprise/how-to-get-string-values-into-column-values-dynamically/m-p/507835#M2465 <LI-CODE lang="markup">| makeresults | eval _raw="System effected_Region a:b:c;d;e;f India" | multikv forceheader=1 `comment("Above just sets up test data")` | eval System=split(System,":") | mvexpand System | eval System=split(System,";") | mvexpand System</LI-CODE><P>&nbsp;</P> Tue, 07 Jul 2020 13:18:40 GMT https://community.splunk.com/t5/Splunk-Enterprise/how-to-get-string-values-into-column-values-dynamically/m-p/507835#M2465 richgalloway 2020-07-07T13:18:40Z