Multi events

Splunk Search

I have an event as below

Names

How do i get each name as separate event.

Split the field then expand it into multiple events.

... | eval Names=split(Names, "|") | mvexpand Names | ...

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

From Splunk Engineer to Kubernetes App Builder Denis GladkikhWhat happens when a lifelong developer turns a ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...