Removing Characters After First Space for a Field in Splunk

[CodingMaestro]

Hello,

I have following results like below:

Host	Type	Type Duplicate Field
ABCD	Coca Cola	Coca Cola
EFGH	7up - Sprite	7up - Sprite

but i want my search for the Type Duplicate Field to remove anything after the first space so my table should like below:

Host	Type	Type Duplicate Field
ABCD	Coca Cola	Coca
EFGH	7up - Sprite	7up

Any help would be greatly appreciated. 😀

[ITWhisperer · Accepted solution]

| eval "Type Duplicated Field" = mvindex(split('Type Duplicated Field', " "), 0)

[CodingMaestro]

Thank You. Worked Perfectly.