Solved: Combining two fields into one field - Splunk Community

Splunk Search

I currently have two different fields

Host Domain

F32432KL34 domain.com

I wish to combine these into one field that shows the following:

F32432KL34@domain.com

How would you suggest going about this?

1 Solution

Solution

Small fix

| eval MyNewField=Host+"@"+Domain

View solution in original post

How about

| eval MyNewField=Host+Domain

Solution

Small fix

| eval MyNewField=Host+"@"+Domain

Thanks @isoutamo

Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting V2

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...