- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is it possible to use commands like makemv or nomv in data models?
visa87
Explorer
02-08-2015
05:26 PM
Is it possible to use the commands like makemv or nomv in data models? I am using regular expressions while building the datamodel for extracting some of the fields. One of the fields is a comma separated list in the format [a,b,c] or sometimes it is just [d]. I want a single field which will have possible values as a,b,c,d etc. And all this in the data model. Is it possible to achieve this ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
danbar6
Explorer
11-15-2017
11:34 AM
You can do this with a calculated field, using an eval looking something like this:
mvfield = split(trim(commafield, "[]"), ",")
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
spammenot66
Contributor
03-10-2016
05:35 AM
I'm looking for same thing https://answers.splunk.com/answers/368708/how-to-split-a-multivalue-field-for-a-data-modelpi.html
