<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to parse data for a table to display list in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-to-parse-data-for-a-table-to-display-list/m-p/403949#M71747</link>
    <description>&lt;P&gt;Hi @skphi13  ,&lt;/P&gt;

&lt;P&gt;Did you have a chance to check out an answer? If it worked, please resolve this post by approving it! If your problem is still not solved, keep us updated so that someone else can help you. &lt;/P&gt;

&lt;P&gt;Thanks for posting!&lt;/P&gt;</description>
    <pubDate>Fri, 07 Jun 2019 15:48:21 GMT</pubDate>
    <dc:creator>evania</dc:creator>
    <dc:date>2019-06-07T15:48:21Z</dc:date>
    <item>
      <title>How to parse data for a table to display list</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-parse-data-for-a-table-to-display-list/m-p/403947#M71745</link>
      <description>&lt;P&gt;This is what I have when I tried my search query.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;INFO: Found installations for 8 accounts [scheduler]
       "accountNames": [
         "MTS",
         "hasc-services",
         "ahchaudhary",
         "reviews",
         "PM-Solutions",
         "traveler",
         "Affiliates",
         "Catalyst"
       ],
       "accountCount": 8
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;I am trying to parse the data to a table to display a list of accountNames only.&lt;/P&gt;

&lt;P&gt;Any help would be appreciated.&lt;/P&gt;</description>
      <pubDate>Tue, 04 Jun 2019 15:26:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-parse-data-for-a-table-to-display-list/m-p/403947#M71745</guid>
      <dc:creator>skphi13</dc:creator>
      <dc:date>2019-06-04T15:26:48Z</dc:date>
    </item>
    <item>
      <title>Re: How to parse data for a table to display list</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-parse-data-for-a-table-to-display-list/m-p/403948#M71746</link>
      <description>&lt;P&gt;I would recommend creating a field to extract the data using a regex:&lt;/P&gt;

&lt;P&gt;Something like:&lt;/P&gt;

&lt;P&gt;| rex field=_raw max_match=0  "\"(?.*)\""&lt;/P&gt;</description>
      <pubDate>Wed, 30 Sep 2020 00:47:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-parse-data-for-a-table-to-display-list/m-p/403948#M71746</guid>
      <dc:creator>omuelle1</dc:creator>
      <dc:date>2020-09-30T00:47:40Z</dc:date>
    </item>
    <item>
      <title>Re: How to parse data for a table to display list</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-parse-data-for-a-table-to-display-list/m-p/403949#M71747</link>
      <description>&lt;P&gt;Hi @skphi13  ,&lt;/P&gt;

&lt;P&gt;Did you have a chance to check out an answer? If it worked, please resolve this post by approving it! If your problem is still not solved, keep us updated so that someone else can help you. &lt;/P&gt;

&lt;P&gt;Thanks for posting!&lt;/P&gt;</description>
      <pubDate>Fri, 07 Jun 2019 15:48:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-parse-data-for-a-table-to-display-list/m-p/403949#M71747</guid>
      <dc:creator>evania</dc:creator>
      <dc:date>2019-06-07T15:48:21Z</dc:date>
    </item>
  </channel>
</rss>

