Hi, i have more ip address in a field like this:
host | IP
h1 10.0.2.2; 10.0.2.1
h2 10.0.2.3; 10.0.1.1
h3 10.2.2.2
I want expand the IP field like this
h1 10.0.2.2
h1 10.0.2.1
h2 10.0.2.3
h2 10.0.1.1
h3 10.2.2.2
is there a way to produce a result like this?
Thanks
@francesco1g Use the below command (use your field name instead of ip):
| eval ip=split(ip,";")
| mvexpand ip
Also, If this reply helps you, an upvote would be appreciated.
@francesco1g Use the below command (use your field name instead of ip):
| eval ip=split(ip,";")
| mvexpand ip
Also, If this reply helps you, an upvote would be appreciated.