https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444061#M173193 <P>$Column1 <BR /> $Column1$<BR /> "$Column1"<BR /> "$Column$"</P> <P>None of the above work.</P> Mon, 04 Feb 2019 10:41:16 GMT v709587 2019-02-04T10:41:16Z https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444053#M173185 <P>Hi,</P> <P>Please help me with a newline command in Splunk query</P> Mon, 04 Feb 2019 07:54:19 GMT https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444053#M173185 v709587 2019-02-04T07:54:19Z https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444054#M173186 <P>Hi<BR /> Can you give more information, what you are really expecting?</P> Mon, 04 Feb 2019 07:58:14 GMT https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444054#M173186 vnravikumar 2019-02-04T07:58:14Z https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444055#M173187 <P><STRONG>[Updated]</STRONG></P> <P>hi @v709587 try this below query </P> <PRE><CODE>|makeresults |eval IMSI1="This is Splunk Dashboard. The list of hosts are as shown." | makemv delim="." IMSI1 | mvexpand IMSI1 |table IMSI1 </CODE></PRE> <P>if you want to add new row try <CODE>append</CODE>, <CODE>appendpipe</CODE> </P> <P>if you want to add new column try <CODE>appendcols</CODE></P> Mon, 04 Feb 2019 08:01:46 GMT https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444055#M173187 harishalipaka 2019-02-04T08:01:46Z https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444056#M173188 <P>eg: "This is Splunk Dashboard. The list of hosts are as shown."</P> <P>I want to display these 2 lines in 2 different lines within same row, same panel. </P> Mon, 04 Feb 2019 08:14:57 GMT https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444056#M173188 v709587 2019-02-04T08:14:57Z https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444057#M173189 <P>To understand more clearly, whether it is possible to give mock screenshot.</P> Mon, 04 Feb 2019 08:22:07 GMT https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444057#M173189 vnravikumar 2019-02-04T08:22:07Z https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444058#M173190 <P>This works !!!. Thank You</P> Mon, 04 Feb 2019 09:03:16 GMT https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444058#M173190 v709587 2019-02-04T09:03:16Z https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444059#M173191 <P>Thanks Ravi for your help</P> Mon, 04 Feb 2019 09:08:00 GMT https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444059#M173191 v709587 2019-02-04T09:08:00Z https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444060#M173192 <P>However, <BR /> "eval Impact=Column3.Column1" displays "Column1" and "Column3" as result and not the value of those parameters. Please help.</P> <P>This is my query<BR /> |inputlookup file.csv | where Column1="$Column1$" and Column2="$Column2$" | return $Column3 | eval Impact=Column3.Column1 | makemv delim="." Impact | mvexpand Impact | table Impact </P> Mon, 04 Feb 2019 10:24:43 GMT https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444060#M173192 v709587 2019-02-04T10:24:43Z https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444061#M173193 <P>$Column1 <BR /> $Column1$<BR /> "$Column1"<BR /> "$Column$"</P> <P>None of the above work.</P> Mon, 04 Feb 2019 10:41:16 GMT https://community.splunk.com/t5/Splunk-Search/newline-in-Splunk-query/m-p/444061#M173193 v709587 2019-02-04T10:41:16Z