- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ezamit
Explorer
01-31-2024
12:18 PM
I have a records that comes with multiple items in a single row. Is there a way i can break it down in a single row. The rest of the values will be same and can be copied. In the screen shot below, can we break down the first row in two rows, second in 5 rows etc.. Thanks in advance to the Splunk Community. They are super helpful.
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
01-31-2024
01:09 PM
Check out the mvexpand command.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
amitshrigoel
Explorer
01-31-2024
01:20 PM
Thanks @richgalloway . I was able to break it down using mvexpand.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
01-31-2024
01:09 PM
Check out the mvexpand command.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
