https://community.splunk.com/t5/Splunk-Search/getting-the-unique-value-for-each-row/m-p/97435#M25147 <P>In my answer, I am assuming that you have a field named outputField which contains "abhay,murari,chennai" exactly like this - a string where commas separate the values. If this is the case, then the following should work</P> <PRE><CODE>yoursearchhere | eval outputField=split(outputField,",") | eval uid = splunk_server + index + _cd | mvexpand outputField | dedup outputFiled | mvcombine delim="," uid </CODE></PRE> Sun, 21 Oct 2012 17:43:46 GMT lguinn2 2012-10-21T17:43:46Z https://community.splunk.com/t5/Splunk-Search/getting-the-unique-value-for-each-row/m-p/97431#M25143 <P>Hi,</P> <P>I have a file which contains as follows:</P> <H2>Filed_Name</H2> <P>abhay,murari,chennai<BR /> chennai,delhi,chennai<BR /> murari,murari,abhay<BR /> delhi<BR /> chennai,murari</P> <P>Now, My output should be : </P> <H2>Output_Filed_Name</H2> <P>abhay,murari,chennai<BR /> chennai,delhi<BR /> murari,abhay<BR /> delhi<BR /> chennai,murari</P> <P>For each row, I am removing duplicate values, in second row -- out of 2 chennai, I took only one chennai and in 3rd row,----out of 2 murari, I took only one murari.</P> <P>Please help !!<BR /> Thanks in Advance,</P> <P>Abhay</P> Mon, 28 Sep 2020 12:39:49 GMT https://community.splunk.com/t5/Splunk-Search/getting-the-unique-value-for-each-row/m-p/97431#M25143 abhayneilam 2020-09-28T12:39:49Z https://community.splunk.com/t5/Splunk-Search/getting-the-unique-value-for-each-row/m-p/97432#M25144 <P>Do you have these extracted as fields? If you do, this should be a fairly easy problem to solve. If you don't, then that's what you should focus on solving.</P> Sun, 21 Oct 2012 12:38:54 GMT https://community.splunk.com/t5/Splunk-Search/getting-the-unique-value-for-each-row/m-p/97432#M25144 Ayn 2012-10-21T12:38:54Z https://community.splunk.com/t5/Splunk-Search/getting-the-unique-value-for-each-row/m-p/97433#M25145 <P>yaa this field "Output_Field_Name" is an extracted field. which comes from "table" command</P> <P>myserch | table fieldone fieldtwo Output_Field_Name</P> <P>Please help me to achieve this...</P> Mon, 28 Sep 2020 12:39:52 GMT https://community.splunk.com/t5/Splunk-Search/getting-the-unique-value-for-each-row/m-p/97433#M25145 abhayneilam 2020-09-28T12:39:52Z https://community.splunk.com/t5/Splunk-Search/getting-the-unique-value-for-each-row/m-p/97434#M25146 <P>I meant that you have the individual values extracted as fields, so "abhay","murari","chennai" would be individual values, not just one field with "abhay,murari,chennai" as one single value.</P> Sun, 21 Oct 2012 14:17:11 GMT https://community.splunk.com/t5/Splunk-Search/getting-the-unique-value-for-each-row/m-p/97434#M25146 Ayn 2012-10-21T14:17:11Z https://community.splunk.com/t5/Splunk-Search/getting-the-unique-value-for-each-row/m-p/97435#M25147 <P>In my answer, I am assuming that you have a field named outputField which contains "abhay,murari,chennai" exactly like this - a string where commas separate the values. If this is the case, then the following should work</P> <PRE><CODE>yoursearchhere | eval outputField=split(outputField,",") | eval uid = splunk_server + index + _cd | mvexpand outputField | dedup outputFiled | mvcombine delim="," uid </CODE></PRE> Sun, 21 Oct 2012 17:43:46 GMT https://community.splunk.com/t5/Splunk-Search/getting-the-unique-value-for-each-row/m-p/97435#M25147 lguinn2 2012-10-21T17:43:46Z