Reporting

Appending a new line character behind each user id for Excel exporting purposes

RVDowning
Contributor

I've generated a list of unique user ids (using values()) which display as one per line on the screen with a message indicating there are 332 more values. So, I need to export the list, but would like to have one user id per line, instead of having them strung horizontally with each value separated by a space in the spreadsheet.

Is there a way to concatenate a new line behind each user id when it is extracted from the data?

Tags (3)

martinaire
Explorer

Option #1

Do the following:

| eval user=user."
" |

There is a new line between the quotation marks. Use SHIFT+ENTER to insert the new line into the search field. This concatenates (appends) a new line at the end of each user value. I tested it and noticed inconsistent results (some values dissappeared). Make sure to validate it.


Option #2

Install Splunk for Excel Export. I have not tested this but it may work.


0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...