Multi events

Splunk Search

I have an event as below

Names

How do i get each name as separate event.

Split the field then expand it into multiple events.

... | eval Names=split(Names, "|") | mvexpand Names | ...

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability As ...