https://community.splunk.com/t5/Splunk-Search/Multi-events/m-p/490827#M137043 <P>Split the field then expand it into multiple events.</P> <PRE><CODE>... | eval Names=split(Names, "|") | mvexpand Names | ... </CODE></PRE> Mon, 04 May 2020 19:29:03 GMT richgalloway 2020-05-04T19:29:03Z https://community.splunk.com/t5/Splunk-Search/Multi-events/m-p/490826#M137042 <P>I have an event as below</P> <H2>Names</H2> <P>"John|James|Jude|Jenni|bond|Tom"</P> <P>How do i get each name as separate event.</P> Mon, 04 May 2020 18:59:30 GMT https://community.splunk.com/t5/Splunk-Search/Multi-events/m-p/490826#M137042 johnsasikumar 2020-05-04T18:59:30Z https://community.splunk.com/t5/Splunk-Search/Multi-events/m-p/490827#M137043 <P>Split the field then expand it into multiple events.</P> <PRE><CODE>... | eval Names=split(Names, "|") | mvexpand Names | ... </CODE></PRE> Mon, 04 May 2020 19:29:03 GMT https://community.splunk.com/t5/Splunk-Search/Multi-events/m-p/490827#M137043 richgalloway 2020-05-04T19:29:03Z