<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Is it possible to use commands like makemv or nomv in data models? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-use-commands-like-makemv-or-nomv-in-data/m-p/133488#M36437</link>
    <description>&lt;P&gt;I'm looking for same thing &lt;A href="https://answers.splunk.com/answers/368708/how-to-split-a-multivalue-field-for-a-data-modelpi.html"&gt;https://answers.splunk.com/answers/368708/how-to-split-a-multivalue-field-for-a-data-modelpi.html&lt;/A&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 10 Mar 2016 13:35:13 GMT</pubDate>
    <dc:creator>spammenot66</dc:creator>
    <dc:date>2016-03-10T13:35:13Z</dc:date>
    <item>
      <title>Is it possible to use commands like makemv or nomv in data models?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-use-commands-like-makemv-or-nomv-in-data/m-p/133487#M36436</link>
      <description>&lt;P&gt;Is it possible to use the commands like makemv or nomv in data models?  I am using regular expressions while building the datamodel for extracting some of the fields. One of the fields is a comma separated list in the format [a,b,c] or sometimes it is just [d]. I want a single field which will have possible values as a,b,c,d etc. And all this in the data model. Is it possible to achieve this ?&lt;/P&gt;</description>
      <pubDate>Mon, 09 Feb 2015 01:26:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-use-commands-like-makemv-or-nomv-in-data/m-p/133487#M36436</guid>
      <dc:creator>visa87</dc:creator>
      <dc:date>2015-02-09T01:26:52Z</dc:date>
    </item>
    <item>
      <title>Re: Is it possible to use commands like makemv or nomv in data models?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-use-commands-like-makemv-or-nomv-in-data/m-p/133488#M36437</link>
      <description>&lt;P&gt;I'm looking for same thing &lt;A href="https://answers.splunk.com/answers/368708/how-to-split-a-multivalue-field-for-a-data-modelpi.html"&gt;https://answers.splunk.com/answers/368708/how-to-split-a-multivalue-field-for-a-data-modelpi.html&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 10 Mar 2016 13:35:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-use-commands-like-makemv-or-nomv-in-data/m-p/133488#M36437</guid>
      <dc:creator>spammenot66</dc:creator>
      <dc:date>2016-03-10T13:35:13Z</dc:date>
    </item>
    <item>
      <title>Re: Is it possible to use commands like makemv or nomv in data models?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-use-commands-like-makemv-or-nomv-in-data/m-p/133489#M36438</link>
      <description>&lt;P&gt;You can do this with a calculated field, using an eval looking something like this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;mvfield = split(trim(commafield, "[]"), ",")
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Wed, 15 Nov 2017 19:34:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Is-it-possible-to-use-commands-like-makemv-or-nomv-in-data/m-p/133489#M36438</guid>
      <dc:creator>danbar6</dc:creator>
      <dc:date>2017-11-15T19:34:30Z</dc:date>
    </item>
  </channel>
</rss>

