Splunk Enterprise

split multi line field

aasabatini
Motivator

Hi Folks,

I need to split  a multiline field

 

 

-2.9416067
53.0374031
0.0

 

 

 

the first line is latitude e the second line is longitude,   is possible extract these two fields from this multi-line field?

“The answer is out there, Neo, and it’s looking for you, and it will find you if you want it to.”
Labels (1)
Tags (1)
0 Karma
1 Solution

ashvinpandey
Contributor

@aasabatini Try adding the below query:

 

| eval latitude=mvindex(Company_Name,0), longitude=mvindex(Company_Name,1)
| table Company_Name latitude longitude

 

Also, If this reply helps you, an upvote would be appreciated.

View solution in original post

ashvinpandey
Contributor

@aasabatini Try adding the below query:

 

| eval latitude=mvindex(Company_Name,0), longitude=mvindex(Company_Name,1)
| table Company_Name latitude longitude

 

Also, If this reply helps you, an upvote would be appreciated.

aasabatini
Motivator

Thanks @ashvinpandey 

“The answer is out there, Neo, and it’s looking for you, and it will find you if you want it to.”
0 Karma
Get Updates on the Splunk Community!

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...

Security Highlights | January 2023 Newsletter

January 2023 Splunk Security Essentials (SSE) 3.7.0 ReleaseThe free Splunk Security Essentials (SSE) 3.7.0 app ...

Platform Highlights | January 2023 Newsletter

 January 2023Peace on Earth and Peace of Mind With Business ResilienceAll organizations can start the new year ...