https://community.splunk.com/t5/Reporting/Data-model-calculated-field-with-max-match/m-p/389901#M6643 <P>Hello,</P> <P>i would like to create a calculated field within a data model with following expression:<BR /> rex field=_raw (?.*) max_match=0</P> <P>But how to tell the data model to consider the max_match expression, as it cannot be used in a calculated field?<BR /> I have already tried to edit the data model file, replacing 'mutlivalue':'false' with 'mutlivalue':'true' but after that it was still single value field.</P> <P>Best regards<BR /> Tomasz</P> Wed, 30 Sep 2020 00:42:24 GMT tomaszwrona 2020-09-30T00:42:24Z https://community.splunk.com/t5/Reporting/Data-model-calculated-field-with-max-match/m-p/389901#M6643 <P>Hello,</P> <P>i would like to create a calculated field within a data model with following expression:<BR /> rex field=_raw (?.*) max_match=0</P> <P>But how to tell the data model to consider the max_match expression, as it cannot be used in a calculated field?<BR /> I have already tried to edit the data model file, replacing 'mutlivalue':'false' with 'mutlivalue':'true' but after that it was still single value field.</P> <P>Best regards<BR /> Tomasz</P> Wed, 30 Sep 2020 00:42:24 GMT https://community.splunk.com/t5/Reporting/Data-model-calculated-field-with-max-match/m-p/389901#M6643 tomaszwrona 2020-09-30T00:42:24Z