topic How can I merge multiple fields per event and separate them using a delimiter, but keep each event separate in my table/stats results? in Splunk Enterprise Security https://community.splunk.com/t5/Splunk-Enterprise-Security/How-can-I-merge-multiple-fields-per-event-and-separate-them/m-p/492239#M8401 <PRE><CODE>EXAMPLE TABLE/STATS: field_1 field_2 012 blah1 345 blah2 ABC blah3 678 blah4 DESIRED OUTPUT: new_field 012 / blah1 345 / blah2 ABC / blah3 678 / blah4 </CODE></PRE> Tue, 28 Jan 2020 16:56:12 GMT lars312 2020-01-28T16:56:12Z How can I merge multiple fields per event and separate them using a delimiter, but keep each event separate in my table/stats results? https://community.splunk.com/t5/Splunk-Enterprise-Security/How-can-I-merge-multiple-fields-per-event-and-separate-them/m-p/492239#M8401 <PRE><CODE>EXAMPLE TABLE/STATS: field_1 field_2 012 blah1 345 blah2 ABC blah3 678 blah4 DESIRED OUTPUT: new_field 012 / blah1 345 / blah2 ABC / blah3 678 / blah4 </CODE></PRE> Tue, 28 Jan 2020 16:56:12 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/How-can-I-merge-multiple-fields-per-event-and-separate-them/m-p/492239#M8401 lars312 2020-01-28T16:56:12Z Re: How can I merge multiple fields per event and separate them using a delimiter, but keep each event separate in my table/stats results? https://community.splunk.com/t5/Splunk-Enterprise-Security/How-can-I-merge-multiple-fields-per-event-and-separate-them/m-p/492240#M8402 <P>add this to your search</P> <PRE><CODE> | eval new_field=field1." / ".field_2 </CODE></PRE> Tue, 28 Jan 2020 17:41:09 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/How-can-I-merge-multiple-fields-per-event-and-separate-them/m-p/492240#M8402 starcher 2020-01-28T17:41:09Z