I have an event as below
"John|James|Jude|Jenni|bond|Tom"
How do i get each name as separate event.
Split the field then expand it into multiple events.
... | eval Names=split(Names, "|") | mvexpand Names | ...
