Split Multivalue into Column

[harshal_chakran]

Hi,

I have a dashboard with table showing result as below:

I would like to display as image below:

I have tried multiple splunk commands to achieve the same.
Kindly help me with this.

[sideview]

What is the search syntax that you have right now? There's a good chance that the best answer is to rework what you have rather than adding more syntax on the end.

[MuS · Accepted solution]

Hi harshal_chakranarayan,

you could do something like this:

your base search to get this date field | makemv Date | eval dateone=mvindex(Date, 0) | eval datetwo=mvindex(Date,1) | table Serial Parameter dateone datetwo

This is based on your example.

hope this helps ...

cheers, MuS