https://community.splunk.com/t5/Splunk-Search/How-to-combine-mv-field-values-into-string/m-p/490152#M136904 <P>Why don't you try this?</P> <PRE><CODE>| makeresults | eval url="/user/v1/group/status/313 /prov/provisioning/v1/group/30863" | makemv url | mvexpand url | rex field=url mode=sed "s/(.*)(\/\d+)/\1/g" </CODE></PRE> <P>By your method you should try </P> <PRE><CODE>| eval n_url= split(url, "/") | eval o_url=(mvindex(n_url,1,mvcount(n_url)-2)) | mvexpand o_url | mvcombine delim="/" o_url | nomv o_url | table url o_url n_url </CODE></PRE> Wed, 25 Sep 2019 20:52:57 GMT mayurr98 2019-09-25T20:52:57Z https://community.splunk.com/t5/Splunk-Search/How-to-combine-mv-field-values-into-string/m-p/490151#M136903 <P>I have a string field that I split into a variable-length multi-value, removed the last value and need to combine it back to a string value. The search below doesn't seem to work<BR /> e.g.:<BR /> <STRONG>url<BR /> /user/v1/group/status/313<BR /> /prov/provisioning/v1/group/30863</STRONG></P> <P>search: </P> <PRE><CODE>eval n_url= split(url, "/") |eval o_url=(mvindex(n_url,1,mvcount(n_url)-2)) |mvcombine delim="/" n_url | nomv n_url | table url, m_url, o_url </CODE></PRE> Wed, 25 Sep 2019 20:19:28 GMT https://community.splunk.com/t5/Splunk-Search/How-to-combine-mv-field-values-into-string/m-p/490151#M136903 c_o_serban 2019-09-25T20:19:28Z https://community.splunk.com/t5/Splunk-Search/How-to-combine-mv-field-values-into-string/m-p/490152#M136904 <P>Why don't you try this?</P> <PRE><CODE>| makeresults | eval url="/user/v1/group/status/313 /prov/provisioning/v1/group/30863" | makemv url | mvexpand url | rex field=url mode=sed "s/(.*)(\/\d+)/\1/g" </CODE></PRE> <P>By your method you should try </P> <PRE><CODE>| eval n_url= split(url, "/") | eval o_url=(mvindex(n_url,1,mvcount(n_url)-2)) | mvexpand o_url | mvcombine delim="/" o_url | nomv o_url | table url o_url n_url </CODE></PRE> Wed, 25 Sep 2019 20:52:57 GMT https://community.splunk.com/t5/Splunk-Search/How-to-combine-mv-field-values-into-string/m-p/490152#M136904 mayurr98 2019-09-25T20:52:57Z