topic Re: How split up a sentence string into multiple words in Getting Data In

How split up a sentence string into multiple words

ibowman1995 — Mon, 02 Dec 2019 18:00:01 GMT

Hi,
let's say there is a field like this:
userData= Split this string

Is it possible to extract this sentence into different fields?
userData1=split
userData2=this
userData3=string

Re: How split up a sentence string into multiple words

richgalloway — Mon, 02 Dec 2019 18:47:21 GMT

Yes, it's possible. Look in the search docs for split. It returns a multi-value field with the words from the original string. Use mvindex() to access them.

... | eval words = split(userData, " ") 
| eval userData1=mvindex(userData, 0), userData2=mvindex(userData,1), userData3=mvindex(userData, 2)

Re: How split up a sentence string into multiple words

to4kawa — Mon, 02 Dec 2019 18:55:06 GMT

Hi, @ibowman1995
Yes, you can. try this.

| makeresults 
| eval userData="Split this string"
| rex field=userData "(?<userData1>[^ ]+) (?<userData2>[^ ]+) (?<userData3>[^ ]+)"

Re: How split up a sentence string into multiple words

dindu — Mon, 02 Dec 2019 22:05:36 GMT

Hi,

You could try this as well.
Please test and let us know.

| makeresults 
| eval userData="Split this string"
|table userData
|eval words=split(userData," ")
|eval userData1=mvindex(words,0),userData2=mvindex(words,1),userData3=mvindex(words,2)

Re: How split up a sentence string into multiple words

jacono64 — Fri, 07 Feb 2020 17:01:31 GMT

i can confirm this works bc i had multiple fields in one string.