how can i create a multivalue field using makeresults command like
|makeresults |eval value_1= " one"
"two"
there should be a new line between the two words
Try something like these
| makeresults | eval value_1=split("one two"," ")
OR
| makeresults | eval value_1="one,two" | makemv value_1 delim=","
Use the split function.
| makeresults |eval value_1= " one"
"two"
| eval value_1 = split(value_1, "
")