Multi events

[johnsasikumar]

I have an event as below

Names

"John|James|Jude|Jenni|bond|Tom"

How do i get each name as separate event.

[richgalloway]

Split the field then expand it into multiple events.

... | eval Names=split(Names, "|") | mvexpand Names | ...