https://community.splunk.com/t5/Splunk-Dev/Search-multi-valued-field-with-specific-values/m-p/570688#M10139 <P>Hi All,</P><P>Can someone help me with the following</P><P>&nbsp;ColY represents multi-value field. I want to search all rows which have null, 0 and someother values in ColY</P><P>Based on the below example output rows should be for A123456,&nbsp;A123461&nbsp;</P><TABLE width="340"><TBODY><TR><TD width="186.406px" height="25px">ColX</TD><TD width="152.594px" height="25px">ColY</TD></TR><TR><TD width="186.406px" height="91px">A123456</TD><TD width="152.594px" height="91px">null<BR />0<BR />56789<BR />987654</TD></TR><TR><TD width="186.406px" height="25px">A123457</TD><TD width="152.594px" height="25px">4332</TD></TR><TR><TD width="186.406px" height="47px">A123458</TD><TD width="152.594px" height="47px">54322<BR />0</TD></TR><TR><TD width="186.406px" height="25px">A123459</TD><TD width="152.594px" height="25px"><P>null</P><P>0</P></TD></TR><TR><TD width="186.406px" height="47px">A123460</TD><TD width="152.594px" height="47px">2345667<BR />7665443</TD></TR><TR><TD>A123461</TD><TD><P>null</P><P>788765</P><P>0</P></TD></TR><TR><TD>A123462</TD><TD><P>876543</P><P>null</P></TD></TR></TBODY></TABLE><P>&nbsp;</P><P>&nbsp;</P> Wed, 13 Oct 2021 00:44:29 GMT vjajula 2021-10-13T00:44:29Z https://community.splunk.com/t5/Splunk-Dev/Search-multi-valued-field-with-specific-values/m-p/570688#M10139 <P>Hi All,</P><P>Can someone help me with the following</P><P>&nbsp;ColY represents multi-value field. I want to search all rows which have null, 0 and someother values in ColY</P><P>Based on the below example output rows should be for A123456,&nbsp;A123461&nbsp;</P><TABLE width="340"><TBODY><TR><TD width="186.406px" height="25px">ColX</TD><TD width="152.594px" height="25px">ColY</TD></TR><TR><TD width="186.406px" height="91px">A123456</TD><TD width="152.594px" height="91px">null<BR />0<BR />56789<BR />987654</TD></TR><TR><TD width="186.406px" height="25px">A123457</TD><TD width="152.594px" height="25px">4332</TD></TR><TR><TD width="186.406px" height="47px">A123458</TD><TD width="152.594px" height="47px">54322<BR />0</TD></TR><TR><TD width="186.406px" height="25px">A123459</TD><TD width="152.594px" height="25px"><P>null</P><P>0</P></TD></TR><TR><TD width="186.406px" height="47px">A123460</TD><TD width="152.594px" height="47px">2345667<BR />7665443</TD></TR><TR><TD>A123461</TD><TD><P>null</P><P>788765</P><P>0</P></TD></TR><TR><TD>A123462</TD><TD><P>876543</P><P>null</P></TD></TR></TBODY></TABLE><P>&nbsp;</P><P>&nbsp;</P> Wed, 13 Oct 2021 00:44:29 GMT https://community.splunk.com/t5/Splunk-Dev/Search-multi-valued-field-with-specific-values/m-p/570688#M10139 vjajula 2021-10-13T00:44:29Z https://community.splunk.com/t5/Splunk-Dev/Search-multi-valued-field-with-specific-values/m-p/570693#M10140 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/226708">@vjajula</a>&nbsp;</P><P>You can try search command,</P><LI-CODE lang="markup">&lt;your base search&gt; | search coIY=null AND coIy=0</LI-CODE><P>&nbsp;--</P><P>An upvote would be appreciated if this reply helps!</P> Wed, 13 Oct 2021 01:22:13 GMT https://community.splunk.com/t5/Splunk-Dev/Search-multi-valued-field-with-specific-values/m-p/570693#M10140 venkatasri 2021-10-13T01:22:13Z https://community.splunk.com/t5/Splunk-Dev/Search-multi-valued-field-with-specific-values/m-p/570694#M10141 <P>Thanks for the solution. This is perfect</P> Wed, 13 Oct 2021 01:36:33 GMT https://community.splunk.com/t5/Splunk-Dev/Search-multi-valued-field-with-specific-values/m-p/570694#M10141 vjajula 2021-10-13T01:36:33Z