Splunk Search

Convert columns to rows

jiaqya
Builder

I have a table like below

A B C

1 2,3,4 Hello

Need a query for which output will be like below
A B C

1 2 Hello
1 3 Hello
1 4 Hello

Split 1 row into different rows based on values in column B

any help ?

Tags (1)
0 Karma
1 Solution

jiaqya
Builder

This did it

|eval B=trim(split(B,","))
|mvexpand B

View solution in original post

0 Karma

jiaqya
Builder

This did it

|eval B=trim(split(B,","))
|mvexpand B

0 Karma
Get Updates on the Splunk Community!

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Cultivate Your Career Growth with Fresh Splunk Training

Growth doesn’t just happen—it’s nurtured. Like tending a garden, developing your Splunk skills takes the right ...

Introducing a Smarter Way to Discover Apps on Splunkbase

We’re excited to announce the launch of a foundational enhancement to Splunkbase: App Tiering.  Because we’ve ...