Create multivalued field in the search based on another field

[hmahendrakumar]

I wantto create a multivalued field bar based on the value of an existing field foo in each event. For example:

if we have these two events:

event1 foo=3
event2 foo=5

then i should create something like this

event1 foo=3 bar=1,2,3
event2 foo=5 bar=1,2,3,4,5

[fox]

what are potentially the min and max values that foo can be? This could also decide the approach...?

[gkanapathy]

it might be helpful if you elaborated on what you intend to do with such a multivalued field. it's possible that whatever your ultimate goal is, it might be possible to achieve more directly without going through this generation of a field?

[hmahendrakumar]

I actually want this: http://answers.splunk.com/questions/11267/splunk-search-to-get-number-of-concurrent-searches-running...