https://community.splunk.com/t5/Splunk-Search/how-to-make-eval-to-work-for-multivalued-fields/m-p/74673#M181223 <P>I would explore the mvexpand command. More information:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.2/SearchReference/Mvexpand">http://docs.splunk.com/Documentation/Splunk/5.0.2/SearchReference/Mvexpand</A></P> Tue, 26 Mar 2013 13:13:49 GMT lpolo 2013-03-26T13:13:49Z https://community.splunk.com/t5/Splunk-Search/how-to-make-eval-to-work-for-multivalued-fields/m-p/74672#M181222 <P>I have multivalued fields so if i use eval it picks and displays only one value for the multivalued field ... Can u suggest me some answers for this ........</P> Tue, 26 Mar 2013 13:07:26 GMT https://community.splunk.com/t5/Splunk-Search/how-to-make-eval-to-work-for-multivalued-fields/m-p/74672#M181222 dilstn 2013-03-26T13:07:26Z https://community.splunk.com/t5/Splunk-Search/how-to-make-eval-to-work-for-multivalued-fields/m-p/74673#M181223 <P>I would explore the mvexpand command. More information:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.2/SearchReference/Mvexpand">http://docs.splunk.com/Documentation/Splunk/5.0.2/SearchReference/Mvexpand</A></P> Tue, 26 Mar 2013 13:13:49 GMT https://community.splunk.com/t5/Splunk-Search/how-to-make-eval-to-work-for-multivalued-fields/m-p/74673#M181223 lpolo 2013-03-26T13:13:49Z