Solved: Combining two fields into one field - Splunk Community

Splunk Search

I currently have two different fields

Host Domain

F32432KL34 domain.com

I wish to combine these into one field that shows the following:

F32432KL34@domain.com

How would you suggest going about this?

1 Solution

Solution

Small fix

| eval MyNewField=Host+"@"+Domain

View solution in original post

How about

| eval MyNewField=Host+Domain

Solution

Small fix

| eval MyNewField=Host+"@"+Domain

Thanks @isoutamo

Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...