https://community.splunk.com/t5/Splunk-Search/Remove-extra-fields/m-p/501352#M140126 <H2>I search the syntax and find Account_Domain result contains two column. How can I result first column so that I left ALPHA??</H2> <P>ALPHA</P> Fri, 05 Jun 2020 23:15:09 GMT keyu921 2020-06-05T23:15:09Z https://community.splunk.com/t5/Splunk-Search/Remove-extra-fields/m-p/501352#M140126 <H2>I search the syntax and find Account_Domain result contains two column. How can I result first column so that I left ALPHA??</H2> <P>ALPHA</P> Fri, 05 Jun 2020 23:15:09 GMT https://community.splunk.com/t5/Splunk-Search/Remove-extra-fields/m-p/501352#M140126 keyu921 2020-06-05T23:15:09Z https://community.splunk.com/t5/Splunk-Search/Remove-extra-fields/m-p/501353#M140127 <P>| eval Account_Domain=mvindex( Account_Domain,0)<BR /><BR /> Use this one it will take the 1st column.</P> Wed, 30 Sep 2020 05:28:41 GMT https://community.splunk.com/t5/Splunk-Search/Remove-extra-fields/m-p/501353#M140127 maityayan1996 2020-09-30T05:28:41Z https://community.splunk.com/t5/Splunk-Search/Remove-extra-fields/m-p/501354#M140128 <P>Thanks it works</P> Wed, 20 May 2020 05:44:22 GMT https://community.splunk.com/t5/Splunk-Search/Remove-extra-fields/m-p/501354#M140128 keyu921 2020-05-20T05:44:22Z https://community.splunk.com/t5/Splunk-Search/Remove-extra-fields/m-p/501355#M140129 <P>You are welcome. Happy Splunking !!!</P> Wed, 20 May 2020 05:46:17 GMT https://community.splunk.com/t5/Splunk-Search/Remove-extra-fields/m-p/501355#M140129 maityayan1996 2020-05-20T05:46:17Z