Splunk Search

How to concatenate results from the same field?

praspai
Path Finder

Hi,

I want to concatenate results from same field into string. How can I do that?

e..g

|inputlookup user.csv| table User 

User 
------------
User 1
User 2
User 3

Users = User 1+User2+User3
0 Karma
1 Solution

kamlesh_vaghela
SplunkTrust
SplunkTrust

@praspai

Can you please try this?

|inputlookup user.csv| stats values(User) as Users | nomv Users

View solution in original post

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@praspai

Can you please try this?

|inputlookup user.csv| stats values(User) as Users | nomv Users

View solution in original post

0 Karma

praspai
Path Finder

Thanks. It works.

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@praspai
Glad to help you.
Can you please accept this answer?

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!