https://community.splunk.com/t5/Splunk-Search/accum-command-for-field/m-p/318362#M162602 <P>I have field called test, what would be out if use assume command</P> <P>command: -- | accum test as test2 ( It will create test2 field but what would be the result).Thanks</P> <P>test<BR /> 1<BR /> 90<BR /> 3<BR /> 4<BR /> 5<BR /> 6<BR /> 8<BR /> 1<BR /> 1</P> Sat, 03 Mar 2018 03:25:08 GMT maheshsat 2018-03-03T03:25:08Z https://community.splunk.com/t5/Splunk-Search/accum-command-for-field/m-p/318362#M162602 <P>I have field called test, what would be out if use assume command</P> <P>command: -- | accum test as test2 ( It will create test2 field but what would be the result).Thanks</P> <P>test<BR /> 1<BR /> 90<BR /> 3<BR /> 4<BR /> 5<BR /> 6<BR /> 8<BR /> 1<BR /> 1</P> Sat, 03 Mar 2018 03:25:08 GMT https://community.splunk.com/t5/Splunk-Search/accum-command-for-field/m-p/318362#M162602 maheshsat 2018-03-03T03:25:08Z https://community.splunk.com/t5/Splunk-Search/accum-command-for-field/m-p/318363#M162603 <P>correction not assume command it is accum command.thanks</P> Sat, 03 Mar 2018 03:26:08 GMT https://community.splunk.com/t5/Splunk-Search/accum-command-for-field/m-p/318363#M162603 maheshsat 2018-03-03T03:26:08Z https://community.splunk.com/t5/Splunk-Search/accum-command-for-field/m-p/318364#M162604 <P>Just run this:</P> <PRE><CODE>| makeresults | eval test = "1 90 3 4 5 6 8 1 1" | makemv test | mvexpand test | accum test as test2 </CODE></PRE> Sat, 03 Mar 2018 11:10:49 GMT https://community.splunk.com/t5/Splunk-Search/accum-command-for-field/m-p/318364#M162604 martin_mueller 2018-03-03T11:10:49Z