I have an xml file in a logging statement that I extracted 3 instances of the value . These values are correctly displayed in a table in separate columns. The xml file will have 2 or 3 instances of the value: **** This is the query:
I would like there to be 1 column, Segment and the FirstSegment, SecondSegment, ThirdSegment be listed in the column. Is there any Splunk function that allows me to create a group called 'Segment' and add the variables, FirstSegment, SecondSegment, ThirdSegment to it?