https://community.splunk.com/t5/Splunk-Search/Spliting-a-string-of-file-names/m-p/570255#M198760 <P>I have a list of files name under one field called "attachment"&nbsp; and I would like to split this string into multiple rows by file names. I tried split/makemv method but it was unsuccessful.. really appreciate any tips on separating this string by file. Thank you&nbsp;</P><P>&nbsp;</P><P>For example:&nbsp;</P><P>Raw output: "<SPAN>image001.png Project_Preference_crosstab (3).csv GC_Preferences - 8 Oct.xlsx GC updated skills with ratings - 30 Sep 2021.xlsx Skill_Details_-_Base_crosstab (3).csv AP Talent list - 30 Sep 2021.xlsx UCD_Skills_Compliance_Details_crosstab (2).csv"</SPAN></P><P>&nbsp;</P><P><SPAN>I would like to see:</SPAN></P><P><SPAN>image001.png</SPAN></P><P><SPAN>Project_Preference_crosstab (3).csv GC_Preferences - 8 Oct.xlsx</SPAN></P><P><SPAN>GC updated skills with ratings - 30 Sep 2021.xlsx</SPAN></P><P><SPAN>Skill_Details_-_Base_crosstab (3).csv</SPAN></P><P><SPAN>AP Talent list - 30 Sep 2021.xlsx</SPAN></P><P><SPAN>UCD_Skills_Compliance_Details_crosstab (2).csv</SPAN></P> Fri, 08 Oct 2021 16:02:49 GMT data_explorer88 2021-10-08T16:02:49Z https://community.splunk.com/t5/Splunk-Search/Spliting-a-string-of-file-names/m-p/570255#M198760 <P>I have a list of files name under one field called "attachment"&nbsp; and I would like to split this string into multiple rows by file names. I tried split/makemv method but it was unsuccessful.. really appreciate any tips on separating this string by file. Thank you&nbsp;</P><P>&nbsp;</P><P>For example:&nbsp;</P><P>Raw output: "<SPAN>image001.png Project_Preference_crosstab (3).csv GC_Preferences - 8 Oct.xlsx GC updated skills with ratings - 30 Sep 2021.xlsx Skill_Details_-_Base_crosstab (3).csv AP Talent list - 30 Sep 2021.xlsx UCD_Skills_Compliance_Details_crosstab (2).csv"</SPAN></P><P>&nbsp;</P><P><SPAN>I would like to see:</SPAN></P><P><SPAN>image001.png</SPAN></P><P><SPAN>Project_Preference_crosstab (3).csv GC_Preferences - 8 Oct.xlsx</SPAN></P><P><SPAN>GC updated skills with ratings - 30 Sep 2021.xlsx</SPAN></P><P><SPAN>Skill_Details_-_Base_crosstab (3).csv</SPAN></P><P><SPAN>AP Talent list - 30 Sep 2021.xlsx</SPAN></P><P><SPAN>UCD_Skills_Compliance_Details_crosstab (2).csv</SPAN></P> Fri, 08 Oct 2021 16:02:49 GMT https://community.splunk.com/t5/Splunk-Search/Spliting-a-string-of-file-names/m-p/570255#M198760 data_explorer88 2021-10-08T16:02:49Z https://community.splunk.com/t5/Splunk-Search/Spliting-a-string-of-file-names/m-p/570258#M198762 <LI-CODE lang="markup">| rex max_match=0 field=output "(?&lt;file&gt;.*?\.(csv|xlsx|png|))\s?" | mvexpand file</LI-CODE> Fri, 08 Oct 2021 16:28:40 GMT https://community.splunk.com/t5/Splunk-Search/Spliting-a-string-of-file-names/m-p/570258#M198762 ITWhisperer 2021-10-08T16:28:40Z https://community.splunk.com/t5/Splunk-Search/Spliting-a-string-of-file-names/m-p/570264#M198765 <P>This works so well!!!! Thank you so much! <span class="lia-unicode-emoji" title=":red_heart:">❤️</span></P> Fri, 08 Oct 2021 16:59:33 GMT https://community.splunk.com/t5/Splunk-Search/Spliting-a-string-of-file-names/m-p/570264#M198765 data_explorer88 2021-10-08T16:59:33Z