I have an event that came in the same time but have different data values that I need to separate.
Example
_time | example A |
2022-09-02 | dgde746gdhu4 duyheuye4d0 |
I need this:
_time | example A |
2022-09-02 | dgde746gdhu4 |
2022-09-02 | duyheuye4d0 |
Use the mvexpand command to separate the values of the example A field into separate events.
| mvexpand 'example A'