Splunk Search

How to get a new line while adding two values

Vignesh-107
Path Finder

Need to get a new line (\n) after the value, is it possible ?

eval check=case( 'value' > 0,'value'+" "+"Good", 'value'<0,'value'+"Bad ",'value=0'+" "+"OKay")

i am getting results like below

5 Good
-2 Bad
0 Okay
1 Good
0 Okay

 

is it possible to get like below

5
Good
-2
Bad
0
Okay
1
Good
0
Okay

 

Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| rex mode=sed "s/\s/\n/g"
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...