Multi events

Splunk Search

I have an event as below

Names

How do i get each name as separate event.

Split the field then expand it into multiple events.

... | eval Names=split(Names, "|") | mvexpand Names | ...

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...