<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to use delim with stats? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-use-delim-with-stats/m-p/125307#M33863</link>
    <description>&lt;P&gt;How to use delim with stats? Multivalued fields generated after using list() in stats is resulting in space-separated values to be emailed to me in a scheduled search rather than them appearing on a new line. Will delim be helpful? If not, is there any other way? &lt;/P&gt;</description>
    <pubDate>Mon, 30 Jun 2014 21:45:42 GMT</pubDate>
    <dc:creator>adityainamdar89</dc:creator>
    <dc:date>2014-06-30T21:45:42Z</dc:date>
    <item>
      <title>How to use delim with stats?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-use-delim-with-stats/m-p/125307#M33863</link>
      <description>&lt;P&gt;How to use delim with stats? Multivalued fields generated after using list() in stats is resulting in space-separated values to be emailed to me in a scheduled search rather than them appearing on a new line. Will delim be helpful? If not, is there any other way? &lt;/P&gt;</description>
      <pubDate>Mon, 30 Jun 2014 21:45:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-use-delim-with-stats/m-p/125307#M33863</guid>
      <dc:creator>adityainamdar89</dc:creator>
      <dc:date>2014-06-30T21:45:42Z</dc:date>
    </item>
    <item>
      <title>Re: How to use delim with stats?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-use-delim-with-stats/m-p/125308#M33864</link>
      <description>&lt;P&gt;You can for example set &lt;CODE&gt;delim=";"&lt;/CODE&gt; and your values will be separated by a semicolon... however, I haven't gotten a newline to work.&lt;/P&gt;</description>
      <pubDate>Tue, 01 Jul 2014 09:07:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-use-delim-with-stats/m-p/125308#M33864</guid>
      <dc:creator>martin_mueller</dc:creator>
      <dc:date>2014-07-01T09:07:51Z</dc:date>
    </item>
    <item>
      <title>Re: How to use delim with stats?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-use-delim-with-stats/m-p/125309#M33865</link>
      <description>&lt;P&gt;I found this solution to my problem:&lt;/P&gt;

&lt;P&gt;| stats delim=":" list(XYZ) as XYZ BY CRITERIA &lt;BR /&gt;
| rex mode=sed field=XYZ "s/:/\n/g"&lt;/P&gt;

&lt;P&gt;This gives you the results on new lines in the table emailed from splunk.&lt;/P&gt;</description>
      <pubDate>Tue, 01 Jul 2014 19:09:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-use-delim-with-stats/m-p/125309#M33865</guid>
      <dc:creator>adityainamdar89</dc:creator>
      <dc:date>2014-07-01T19:09:22Z</dc:date>
    </item>
    <item>
      <title>Re: How to use delim with stats?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-use-delim-with-stats/m-p/125310#M33866</link>
      <description>&lt;P&gt;Thanks..I figured out the solution &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 01 Jul 2014 19:13:25 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-use-delim-with-stats/m-p/125310#M33866</guid>
      <dc:creator>adityainamdar89</dc:creator>
      <dc:date>2014-07-01T19:13:25Z</dc:date>
    </item>
    <item>
      <title>Re: How to use delim with stats?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-use-delim-with-stats/m-p/125311#M33867</link>
      <description>&lt;P&gt;Glad you found a solution @adityainamdar89 &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt; Be sure to accept your answer (clicking on the check mark to the left of this answer) so other users with similar issues will look to this post for help. You also get some karma points too!&lt;/P&gt;</description>
      <pubDate>Tue, 01 Jul 2014 20:34:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-use-delim-with-stats/m-p/125311#M33867</guid>
      <dc:creator>ppablo</dc:creator>
      <dc:date>2014-07-01T20:34:54Z</dc:date>
    </item>
  </channel>
</rss>

