https://community.splunk.com/t5/Splunk-Search/Why-does-the-split-function-fail-for-list-split-failure-1-and-2/m-p/616060#M214086 <P>This issue was discussed a while back and the consensus is that it's a bug introduced on&nbsp;<SPAN>8.2.x+</SPAN></P><P><A href="https://community.splunk.com/t5/Splunk-Search/Multivalue-field-which-contains-the-string-quot-data-quot-cause/m-p/574649" target="_blank" rel="noopener">https://community.splunk.com/t5/Splunk-Search/Multivalue-field-which-contains-the-string-quot-data-quot-cause/m-p/574649</A></P><P>&nbsp;</P> Wed, 05 Oct 2022 21:16:20 GMT johnhuang 2022-10-05T21:16:20Z https://community.splunk.com/t5/Splunk-Search/Why-does-the-split-function-fail-for-list-split-failure-1-and-2/m-p/616055#M214085 <PRE>| makeresults count=1<BR />| eval list_split_failure_1 = "fail:,searching old data:,searching new"<BR />| eval list_split_failure_2 = "fail:,searching old ata:,searching new"<BR />| eval list_split_success = "fail:,searching old qata:,searching old dta:,searching old ta:,searching new"<BR />| eval list_split_failure_1 = split(list_split_failure_1, ",")<BR />| eval list_split_failure_2 = split(list_split_failure_2, ",")<BR />| eval list_split_success = split(list_split_success, ",")</PRE> <P><BR />Can someone help me to understand why the split function fails for list_split_failure_1 and 2 but succeeds for list_split_success?</P> Wed, 05 Oct 2022 20:18:16 GMT https://community.splunk.com/t5/Splunk-Search/Why-does-the-split-function-fail-for-list-split-failure-1-and-2/m-p/616055#M214085 rkoster 2022-10-05T20:18:16Z https://community.splunk.com/t5/Splunk-Search/Why-does-the-split-function-fail-for-list-split-failure-1-and-2/m-p/616060#M214086 <P>This issue was discussed a while back and the consensus is that it's a bug introduced on&nbsp;<SPAN>8.2.x+</SPAN></P><P><A href="https://community.splunk.com/t5/Splunk-Search/Multivalue-field-which-contains-the-string-quot-data-quot-cause/m-p/574649" target="_blank" rel="noopener">https://community.splunk.com/t5/Splunk-Search/Multivalue-field-which-contains-the-string-quot-data-quot-cause/m-p/574649</A></P><P>&nbsp;</P> Wed, 05 Oct 2022 21:16:20 GMT https://community.splunk.com/t5/Splunk-Search/Why-does-the-split-function-fail-for-list-split-failure-1-and-2/m-p/616060#M214086 johnhuang 2022-10-05T21:16:20Z