splunk dashboard

[Siddharthnegi]

Hello I have lookup file which have content like this

name                   count                          time

abc                          3                               04-24
cdf                           2                                 04-24

but i want the content of  the lookup file to be like this

name                 count                   time
abc                            1                       04-24
abc                           1                        04-24
abc                           1                        04-24
cdf                            1                       04-24
cdf                            1                        04-24

how will i able to do this?

[ITWhisperer · Accepted solution]

| eval row=mvrangee(0,count)
| mvexpand row
| fields - row
| eval count=1