topic Split without delimiter in Splunk Search https://community.splunk.com/t5/Splunk-Search/Split-without-delimiter/m-p/564100#M196494 <P>How can I split a field, into many other fields, but without using a delimiter, and using the position range instead?</P><P>For example:</P><P>bignumber = 16563764</P><P>I need to split it in:</P><P>account id = position [0 to 3] of field "bignumber"</P><P>company code = position [4 to 6] of field "bignumber"</P><P>operation code = position [7]&nbsp;of field "bignumber"</P><P>&nbsp;</P><P>Thanks!!</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 20 Aug 2021 14:27:19 GMT EberlinM 2021-08-20T14:27:19Z Split without delimiter https://community.splunk.com/t5/Splunk-Search/Split-without-delimiter/m-p/564100#M196494 <P>How can I split a field, into many other fields, but without using a delimiter, and using the position range instead?</P><P>For example:</P><P>bignumber = 16563764</P><P>I need to split it in:</P><P>account id = position [0 to 3] of field "bignumber"</P><P>company code = position [4 to 6] of field "bignumber"</P><P>operation code = position [7]&nbsp;of field "bignumber"</P><P>&nbsp;</P><P>Thanks!!</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 20 Aug 2021 14:27:19 GMT https://community.splunk.com/t5/Splunk-Search/Split-without-delimiter/m-p/564100#M196494 EberlinM 2021-08-20T14:27:19Z Re: Split without delimiter https://community.splunk.com/t5/Splunk-Search/Split-without-delimiter/m-p/564110#M196500 <LI-CODE lang="markup">| makeresults | eval bignumber = 16563764 | eval digits=split(tostring(bignumber),"") | eval accountId=mvjoin(mvindex(digits,0,3),"") | eval companyCode=mvjoin(mvindex(digits,4,6),"") | eval operationCode=mvindex(digits,7) | fields - digits</LI-CODE> Fri, 20 Aug 2021 15:11:56 GMT https://community.splunk.com/t5/Splunk-Search/Split-without-delimiter/m-p/564110#M196500 ITWhisperer 2021-08-20T15:11:56Z Re: Split without delimiter https://community.splunk.com/t5/Splunk-Search/Split-without-delimiter/m-p/564111#M196501 <P>Thank you! Worked perfectly!</P> Fri, 20 Aug 2021 15:20:44 GMT https://community.splunk.com/t5/Splunk-Search/Split-without-delimiter/m-p/564111#M196501 EberlinM 2021-08-20T15:20:44Z