https://community.splunk.com/t5/Splunk-Search/get-single-field-values-from-multiple-field-values/m-p/684530#M233667 <P>Thanks, this worked <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P>&nbsp;</P> Wed, 17 Apr 2024 15:57:15 GMT avi123 2024-04-17T15:57:15Z https://community.splunk.com/t5/Splunk-Search/get-single-field-values-from-multiple-field-values/m-p/684525#M233664 <P>Hi All,</P><P>I have an output from a lookup table in splunk where the team work timings field is coming as::</P><P>TeamWorkTimings</P><P>09:00:00-18:00:00</P><P>I want the output to be separated in two fields, like:</P><P>TeamStart&nbsp; &nbsp;TeamEnd</P><P>09:00:00&nbsp; &nbsp; &nbsp; &nbsp;18:00:00</P><P>&nbsp;</P><P>Please help me in getting this output in splunk</P> Wed, 17 Apr 2024 15:40:32 GMT https://community.splunk.com/t5/Splunk-Search/get-single-field-values-from-multiple-field-values/m-p/684525#M233664 avi123 2024-04-17T15:40:32Z https://community.splunk.com/t5/Splunk-Search/get-single-field-values-from-multiple-field-values/m-p/684529#M233666 <LI-CODE lang="markup">| eval TeamStart=mvindex(split(TeamWorkTimings,"-"),0) | eval TeamEnd=mvindex(split(TeamWorkTimings,"-"),1)</LI-CODE> Wed, 17 Apr 2024 15:54:54 GMT https://community.splunk.com/t5/Splunk-Search/get-single-field-values-from-multiple-field-values/m-p/684529#M233666 ITWhisperer 2024-04-17T15:54:54Z https://community.splunk.com/t5/Splunk-Search/get-single-field-values-from-multiple-field-values/m-p/684530#M233667 <P>Thanks, this worked <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P>&nbsp;</P> Wed, 17 Apr 2024 15:57:15 GMT https://community.splunk.com/t5/Splunk-Search/get-single-field-values-from-multiple-field-values/m-p/684530#M233667 avi123 2024-04-17T15:57:15Z