I have a file which contains as follows:
Now, My output should be :
For each row, I am removing duplicate values, in second row -- out of 2 chennai, I took only one chennai and in 3rd row,----out of 2 murari, I took only one murari.
Please help !!
Thanks in Advance,
In my answer, I am assuming that you have a field named outputField which contains "abhay,murari,chennai" exactly like this - a string where commas separate the values. If this is the case, then the following should work
yoursearchhere | eval outputField=split(outputField,",") | eval uid = splunk_server + index + _cd | mvexpand outputField | dedup outputFiled | mvcombine delim="," uid