Multi events

Splunk Search

I have an event as below

Names

How do i get each name as separate event.

Split the field then expand it into multiple events.

... | eval Names=split(Names, "|") | mvexpand Names | ...

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

You step up to the machine. The pixelated corridors of a certain 1993 FPS load in front of you, EMP Pulse ...

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...