https://community.splunk.com/t5/Splunk-Search/splunk-merge-field-values/m-p/667942#M229169 <P>Instead of using nomv, try this</P><LI-CODE lang="markup">| eval merged_environment=mvjoin(merged_environment, ",")</LI-CODE> Wed, 08 Nov 2023 17:42:23 GMT ITWhisperer 2023-11-08T17:42:23Z https://community.splunk.com/t5/Splunk-Search/splunk-merge-field-values/m-p/667914#M229159 <P>I have a field called environment which has values like dev,prod,uat,sit.<BR />Now I want to create a new_field which all the field values of&nbsp;environment field.<BR /><BR />Example: (4 field values)<BR /><STRONG>environment&nbsp;</STRONG><BR />dev<BR />prod<BR />uat<BR />sit<BR /><BR />After query: ( 1 field value, separated by any string)<BR />merge_environment= dev | prod | uat | sit<BR /><BR />How to achieve this?</P> Wed, 08 Nov 2023 15:53:57 GMT https://community.splunk.com/t5/Splunk-Search/splunk-merge-field-values/m-p/667914#M229159 viku7474 2023-11-08T15:53:57Z https://community.splunk.com/t5/Splunk-Search/splunk-merge-field-values/m-p/667923#M229162 <P>Space separated</P><LI-CODE lang="markup">| stats values(environment) as merge_environment | nomv merge_environment</LI-CODE> Wed, 08 Nov 2023 16:06:20 GMT https://community.splunk.com/t5/Splunk-Search/splunk-merge-field-values/m-p/667923#M229162 ITWhisperer 2023-11-08T16:06:20Z https://community.splunk.com/t5/Splunk-Search/splunk-merge-field-values/m-p/667930#M229167 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp; Thank you!!<BR /><BR />It works, Since I am passing this token in mail subject, can I separate it by comma or hyphen.?</P> Wed, 08 Nov 2023 17:35:29 GMT https://community.splunk.com/t5/Splunk-Search/splunk-merge-field-values/m-p/667930#M229167 viku7474 2023-11-08T17:35:29Z https://community.splunk.com/t5/Splunk-Search/splunk-merge-field-values/m-p/667942#M229169 <P>Instead of using nomv, try this</P><LI-CODE lang="markup">| eval merged_environment=mvjoin(merged_environment, ",")</LI-CODE> Wed, 08 Nov 2023 17:42:23 GMT https://community.splunk.com/t5/Splunk-Search/splunk-merge-field-values/m-p/667942#M229169 ITWhisperer 2023-11-08T17:42:23Z