<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How do I covert an Object name into columns using a back slash? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-do-I-covert-an-Object-name-into-columns-using-a-back-slash/m-p/441466#M125413</link>
    <description>&lt;P&gt;The below query should help you , you can also rename row1, row2 etc. accordingly and display the columns and row that you want using where&lt;/P&gt;

&lt;UL&gt;
&lt;LI&gt;
|makeresults|eval
  x="R:\ClientReports\OpenCaseReport\DataFiles\AmeriHealth_Open\CaseReport_20101210.txt"|
  makemv delim="\" x|mvexpand x|
  transpose&lt;/LI&gt;
&lt;/UL&gt;</description>
    <pubDate>Tue, 29 Sep 2020 22:26:28 GMT</pubDate>
    <dc:creator>Vijeta</dc:creator>
    <dc:date>2020-09-29T22:26:28Z</dc:date>
    <item>
      <title>How do I covert an Object name into columns using a back slash?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-do-I-covert-an-Object-name-into-columns-using-a-back-slash/m-p/441465#M125412</link>
      <description>&lt;P&gt;Hello Team,&lt;/P&gt;

&lt;P&gt;Could anyone help me in spiting an Object name into a column name?&lt;/P&gt;

&lt;P&gt;Like In Query we are getting Object name as in One Column :&lt;/P&gt;

&lt;P&gt;R:\ClientReports\OpenCaseReport\DataFiles\AmeriHealth_Open\CaseReport_20101210.txt&lt;/P&gt;

&lt;P&gt;I wanted to spit that into 6 columns as A ,B,C,D,E,F&lt;/P&gt;

&lt;P&gt;The output would be like this &lt;/P&gt;

&lt;P&gt;Header table :    A |B|C|D|E|F&lt;BR /&gt;
Row Data       :    R: |ClientReports|OpenCaseReport|DataFiles|AmeriHealthOpen|CaseReportt_20101210.txt&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 22:26:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-do-I-covert-an-Object-name-into-columns-using-a-back-slash/m-p/441465#M125412</guid>
      <dc:creator>shishirkumar</dc:creator>
      <dc:date>2020-09-29T22:26:22Z</dc:date>
    </item>
    <item>
      <title>Re: How do I covert an Object name into columns using a back slash?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-do-I-covert-an-Object-name-into-columns-using-a-back-slash/m-p/441466#M125413</link>
      <description>&lt;P&gt;The below query should help you , you can also rename row1, row2 etc. accordingly and display the columns and row that you want using where&lt;/P&gt;

&lt;UL&gt;
&lt;LI&gt;
|makeresults|eval
  x="R:\ClientReports\OpenCaseReport\DataFiles\AmeriHealth_Open\CaseReport_20101210.txt"|
  makemv delim="\" x|mvexpand x|
  transpose&lt;/LI&gt;
&lt;/UL&gt;</description>
      <pubDate>Tue, 29 Sep 2020 22:26:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-do-I-covert-an-Object-name-into-columns-using-a-back-slash/m-p/441466#M125413</guid>
      <dc:creator>Vijeta</dc:creator>
      <dc:date>2020-09-29T22:26:28Z</dc:date>
    </item>
    <item>
      <title>Re: How do I covert an Object name into columns using a back slash?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-do-I-covert-an-Object-name-into-columns-using-a-back-slash/m-p/441467#M125414</link>
      <description>&lt;P&gt;it not working if i am remove hardcoded value that is "R:\ClientReports\OpenCaseReport\DataFiles\AmeriHealth_Open\CaseReport_20101210.txt" with my column name ?&lt;/P&gt;

&lt;P&gt;Could You please help to resolve that.&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 22:32:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-do-I-covert-an-Object-name-into-columns-using-a-back-slash/m-p/441467#M125414</guid>
      <dc:creator>shishirkumar</dc:creator>
      <dc:date>2020-09-29T22:32:15Z</dc:date>
    </item>
  </channel>
</rss>

