Remove extra fields

[keyu921]

I search the syntax and find Account_Domain result contains two column. How can I result first column so that I left ALPHA??

ALPHA

[maityayan1996 · Accepted solution]

| eval Account_Domain=mvindex( Account_Domain,0)

Use this one it will take the 1st column.

[keyu921]

Thanks it works

[maityayan1996]

You are welcome. Happy Splunking !!!