https://community.splunk.com/t5/Splunk-Dev/I-want-to-know-how-can-i-get-the-data-of-a-record-in-a-tabular/m-p/391684#M6596 <P>Hello guys, I am trying to find a way to get the data in a record in the following manner to get i a table output in splunk . The data in the record is as follows </P> <P>os_repo_status: last-update-result: [2018-01-25 18:53:14] {success} System update completed successfully<BR /> : remote-trigger: 1_per_hour <STRONG>UCMPROXY</STRONG>/tomorrowland-patching/os-update-trigger/<STRONG>FQHOST</STRONG><BR /> : reboot-eligible: true<BR /> : next-update: NO_SCHEDULE<BR /> : update-eligible: true<BR /> : updates-available: false<BR /> I want to get the Fields "upadtes-available" field under the "os_repo_status" in the above list in a table output </P> <P>my basic search is " | inputlookup mdbstaticlooup Where ....... | table os-repo-satus| "</P> <P>i am not able to see anything in the os-repo-field in the table section. <BR /> Can any one Please help me in getting this solved .</P> Tue, 29 Sep 2020 19:29:02 GMT c_scherr 2020-09-29T19:29:02Z https://community.splunk.com/t5/Splunk-Dev/I-want-to-know-how-can-i-get-the-data-of-a-record-in-a-tabular/m-p/391684#M6596 <P>Hello guys, I am trying to find a way to get the data in a record in the following manner to get i a table output in splunk . The data in the record is as follows </P> <P>os_repo_status: last-update-result: [2018-01-25 18:53:14] {success} System update completed successfully<BR /> : remote-trigger: 1_per_hour <STRONG>UCMPROXY</STRONG>/tomorrowland-patching/os-update-trigger/<STRONG>FQHOST</STRONG><BR /> : reboot-eligible: true<BR /> : next-update: NO_SCHEDULE<BR /> : update-eligible: true<BR /> : updates-available: false<BR /> I want to get the Fields "upadtes-available" field under the "os_repo_status" in the above list in a table output </P> <P>my basic search is " | inputlookup mdbstaticlooup Where ....... | table os-repo-satus| "</P> <P>i am not able to see anything in the os-repo-field in the table section. <BR /> Can any one Please help me in getting this solved .</P> Tue, 29 Sep 2020 19:29:02 GMT https://community.splunk.com/t5/Splunk-Dev/I-want-to-know-how-can-i-get-the-data-of-a-record-in-a-tabular/m-p/391684#M6596 c_scherr 2020-09-29T19:29:02Z https://community.splunk.com/t5/Splunk-Dev/I-want-to-know-how-can-i-get-the-data-of-a-record-in-a-tabular/m-p/391685#M6597 <P>So the above data is one single or multiple rows of your search <CODE>| inputlookup mdbstaticlooup Where ....... | table os-repo-satus</CODE>?</P> Tue, 15 May 2018 18:11:34 GMT https://community.splunk.com/t5/Splunk-Dev/I-want-to-know-how-can-i-get-the-data-of-a-record-in-a-tabular/m-p/391685#M6597 somesoni2 2018-05-15T18:11:34Z