https://community.splunk.com/t5/Splunk-Search/Remove-duplicate-value-from-fields/m-p/540771#M153045 <P>Hi all,</P><P>I found a solution to this I used mvexpand command this way:</P><P>..|&nbsp;mvexpand Fieldname | dedup Fieldname | format<BR /><BR />This pretty much was what I was looking for!</P> Mon, 22 Feb 2021 06:19:19 GMT timAugustine 2021-02-22T06:19:19Z https://community.splunk.com/t5/Splunk-Search/Remove-duplicate-value-from-fields/m-p/540747#M153031 <P>I'm trying to remove the duplicates in a field as described below</P><P><BR />EVENT_No&nbsp; &nbsp; &nbsp;|&nbsp; &nbsp; &nbsp;Fieldname<BR />1&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;a<BR />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; b<BR />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; c</P><P>2&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;a<BR />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; b</P><P>3&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;c<BR />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; a<BR /><BR />Is there a way I can make it look like this?</P><P>EVENT_No&nbsp; &nbsp; &nbsp;|&nbsp; &nbsp; &nbsp;Fieldname<BR />1&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;a<BR />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; b<BR />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; c</P> Mon, 22 Feb 2021 00:34:34 GMT https://community.splunk.com/t5/Splunk-Search/Remove-duplicate-value-from-fields/m-p/540747#M153031 timAugustine 2021-02-22T00:34:34Z https://community.splunk.com/t5/Splunk-Search/Remove-duplicate-value-from-fields/m-p/540771#M153045 <P>Hi all,</P><P>I found a solution to this I used mvexpand command this way:</P><P>..|&nbsp;mvexpand Fieldname | dedup Fieldname | format<BR /><BR />This pretty much was what I was looking for!</P> Mon, 22 Feb 2021 06:19:19 GMT https://community.splunk.com/t5/Splunk-Search/Remove-duplicate-value-from-fields/m-p/540771#M153045 timAugustine 2021-02-22T06:19:19Z