https://community.splunk.com/t5/Splunk-Search/How-to-split-a-multivalue-field-for-a-data-model-pivot-table-to/m-p/283774#M85767 <P>I have a field <STRONG>states</STRONG>, which is delimited by <CODE>|</CODE>. For example <CODE>states=NY|VA|MO|GA</CODE><BR /> I'm able to get it to expand and treat each as a seperate value:</P> <PRE><CODE>dedup states | table states | makemv delim="|" states| mvexpand states|... </CODE></PRE> <P>How do I do this within a data model and force it to treat each state as a separate value in these scenarios?</P> Wed, 17 Feb 2016 17:55:25 GMT spammenot66 2016-02-17T17:55:25Z https://community.splunk.com/t5/Splunk-Search/How-to-split-a-multivalue-field-for-a-data-model-pivot-table-to/m-p/283774#M85767 <P>I have a field <STRONG>states</STRONG>, which is delimited by <CODE>|</CODE>. For example <CODE>states=NY|VA|MO|GA</CODE><BR /> I'm able to get it to expand and treat each as a seperate value:</P> <PRE><CODE>dedup states | table states | makemv delim="|" states| mvexpand states|... </CODE></PRE> <P>How do I do this within a data model and force it to treat each state as a separate value in these scenarios?</P> Wed, 17 Feb 2016 17:55:25 GMT https://community.splunk.com/t5/Splunk-Search/How-to-split-a-multivalue-field-for-a-data-model-pivot-table-to/m-p/283774#M85767 spammenot66 2016-02-17T17:55:25Z https://community.splunk.com/t5/Splunk-Search/How-to-split-a-multivalue-field-for-a-data-model-pivot-table-to/m-p/283775#M85768 <P>|eval states=split(states,"|") |mvexpand states | field states</P> Fri, 02 Dec 2016 09:21:23 GMT https://community.splunk.com/t5/Splunk-Search/How-to-split-a-multivalue-field-for-a-data-model-pivot-table-to/m-p/283775#M85768 ajayabburi508 2016-12-02T09:21:23Z