<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How do i delimit the multivalued fields in Splunk? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-do-i-delimit-the-multivalued-fields-in-Splunk/m-p/491641#M83991</link>
    <description>&lt;P&gt;Thanks @to4kawa it worked &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
    <pubDate>Tue, 01 Oct 2019 13:07:54 GMT</pubDate>
    <dc:creator>Shashank_87</dc:creator>
    <dc:date>2019-10-01T13:07:54Z</dc:date>
    <item>
      <title>How do i delimit the multivalued fields in Splunk?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-i-delimit-the-multivalued-fields-in-Splunk/m-p/491639#M83989</link>
      <description>&lt;P&gt;Hi, I have a search which produces a table and one of the column Username contains multiple values. They are kind of aliases for the same user. I need to delimit them using a comma separator. How do i achieve that please?&lt;/P&gt;

&lt;P&gt;Username&lt;BR /&gt;
&lt;A href="mailto:test1@gmail.com"&gt;test1@gmail.com&lt;/A&gt;&lt;BR /&gt;
&lt;A href="mailto:test2@gmail.com"&gt;test2@gmail.com&lt;/A&gt;&lt;BR /&gt;
&lt;A href="mailto:test3@gmail.com"&gt;test3@gmail.com&lt;/A&gt;&lt;BR /&gt;
&lt;A href="mailto:test4@gmail.com"&gt;test4@gmail.com&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;I want something like this - &lt;A href="mailto:test1@gmail.com"&gt;test1@gmail.com&lt;/A&gt;, &lt;A href="mailto:test2@gmail.com"&gt;test2@gmail.com&lt;/A&gt;, &lt;A href="mailto:test3@gmail.com"&gt;test3@gmail.com&lt;/A&gt;, &lt;A href="mailto:test4@gmail.com"&gt;test4@gmail.com&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 01 Oct 2019 11:00:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-i-delimit-the-multivalued-fields-in-Splunk/m-p/491639#M83989</guid>
      <dc:creator>Shashank_87</dc:creator>
      <dc:date>2019-10-01T11:00:55Z</dc:date>
    </item>
    <item>
      <title>Re: How do i delimit the multivalued fields in Splunk?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-i-delimit-the-multivalued-fields-in-Splunk/m-p/491640#M83990</link>
      <description>&lt;PRE&gt;&lt;CODE&gt;|makeresults
|eval username="test1@gmail.com#test2@gmail.com#test3@gmail.com#test4@gmail.com"
|makemv delim="#" username
|eval result=mvjoin(username,",")
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Hi, Try it.&lt;/P&gt;</description>
      <pubDate>Tue, 01 Oct 2019 11:25:11 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-i-delimit-the-multivalued-fields-in-Splunk/m-p/491640#M83990</guid>
      <dc:creator>to4kawa</dc:creator>
      <dc:date>2019-10-01T11:25:11Z</dc:date>
    </item>
    <item>
      <title>Re: How do i delimit the multivalued fields in Splunk?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-i-delimit-the-multivalued-fields-in-Splunk/m-p/491641#M83991</link>
      <description>&lt;P&gt;Thanks @to4kawa it worked &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 01 Oct 2019 13:07:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-i-delimit-the-multivalued-fields-in-Splunk/m-p/491641#M83991</guid>
      <dc:creator>Shashank_87</dc:creator>
      <dc:date>2019-10-01T13:07:54Z</dc:date>
    </item>
  </channel>
</rss>

