https://community.splunk.com/t5/Splunk-Search/How-to-write-field-name-in-its-value/m-p/580033#M202105 <P>There are couple of ways, for example</P><LI-CODE lang="markup">| makeresults | eval _raw="test_1 test_2 test_3 warn error critical" | multikv forceheader=1 | table test_* | foreach test_* [eval test=if(isnull(test),"&lt;&lt;FIELD&gt;&gt;"." - ".&lt;&lt;FIELD&gt;&gt;,mvappend(test,"&lt;&lt;FIELD&gt;&gt;"." - ".&lt;&lt;FIELD&gt;&gt;))] | table test</LI-CODE><P>or</P><LI-CODE lang="markup">| makeresults | eval _raw="test_1 test_2 test_3 warn error critical" | multikv forceheader=1 | table test_* | transpose 0 | eval test=column." - ".'row 1' | table test</LI-CODE> Wed, 05 Jan 2022 17:05:42 GMT ITWhisperer 2022-01-05T17:05:42Z https://community.splunk.com/t5/Splunk-Search/How-to-write-field-name-in-its-value/m-p/580018#M202097 <P>Hi,</P><P>How can I write the name of a field in the value like I have :</P><TABLE border="1" width="25%"><TBODY><TR><TD width="25%">test_1</TD><TD width="12.5%">test_2</TD><TD width="12.5%">test_3</TD></TR><TR><TD width="25%">warn</TD><TD width="12.5%">error</TD><TD width="12.5%">critical</TD></TR></TBODY></TABLE><P>&nbsp;</P><P>I want :</P><TABLE border="1" width="25%"><TBODY><TR><TD width="50%" height="25px">test</TD></TR><TR><TD width="50%" height="25px">test_1 - warn</TD></TR><TR><TD height="25px">test_2 -&nbsp;error</TD></TR><TR><TD height="25px">test_3 -&nbsp;critical</TD></TR></TBODY></TABLE><P>&nbsp;</P><P>I must do this for unknown fields (by now I have 3 tests but it can be more so&nbsp;it must be variable).&nbsp;</P><P>I thought to foreach command but I don't know how to do it.</P><P>Can you help me if this usecase is possible ?</P> Wed, 05 Jan 2022 15:26:32 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-field-name-in-its-value/m-p/580018#M202097 mah 2022-01-05T15:26:32Z https://community.splunk.com/t5/Splunk-Search/How-to-write-field-name-in-its-value/m-p/580033#M202105 <P>There are couple of ways, for example</P><LI-CODE lang="markup">| makeresults | eval _raw="test_1 test_2 test_3 warn error critical" | multikv forceheader=1 | table test_* | foreach test_* [eval test=if(isnull(test),"&lt;&lt;FIELD&gt;&gt;"." - ".&lt;&lt;FIELD&gt;&gt;,mvappend(test,"&lt;&lt;FIELD&gt;&gt;"." - ".&lt;&lt;FIELD&gt;&gt;))] | table test</LI-CODE><P>or</P><LI-CODE lang="markup">| makeresults | eval _raw="test_1 test_2 test_3 warn error critical" | multikv forceheader=1 | table test_* | transpose 0 | eval test=column." - ".'row 1' | table test</LI-CODE> Wed, 05 Jan 2022 17:05:42 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-field-name-in-its-value/m-p/580033#M202105 ITWhisperer 2022-01-05T17:05:42Z