depends on one of the filed(type) value, re-name fields and create table

[Pragnesh]

here is log format:

Type=0 name=aaa1 door=aaa2 street=aaa3 city=aaa4 country=aaa5 dr="" CN=""
Type=0 name=bbb1 door=bbb2 street=bbb3 city=bbb4 country=bbb5 dr="" CN=""
Type=1 name=ccc1 door="" street=ccc3 city=ccc4 country="" dr=ccc2 CN=ccc5
Type=1 name=ddd1 door="" street=ddd3 city=ddd4 country="" dr=ddd2 CN=ddd5

wanted to create table like below:

NAME	DOOR-NUMBER	STREET	CITY	COUNTRY-NAME
aaa1	aaa2	aaa3	aaa4	aaa5
bbb1	bbb2	bbb3	bbb4	bbb5
ccc1	ccc2	ccc3	ccc4	ccc5
ddd1	ddd2	ddd3	ddd4	ddd5

[ITWhisperer]

| makeresults 
| eval _raw="Type=0 name=aaa1 door=aaa2 street=aaa3 city=aaa4 country=aaa5 dr=\"\" CN=\"\"
Type=0 name=bbb1 door=bbb2 street=bbb3 city=bbb4 country=bbb5 dr=\"\" CN=\"\"
Type=1 name=ccc1 door=\"\" street=ccc3 city=ccc4 country=\"\" dr=ccc2 CN=ccc5
Type=1 name=ddd1 door=\"\" street=ddd3 city=ddd4 country=\"\" dr=ddd2 CN=ddd5"
| multikv noheader=t
| table _raw



| extract pairdelim=" " kvdelim="="
| eval country=if(country="",CN,country)
| eval door=if(door="",dr,door)
| table name door street city country