newline in Splunk query

[v709587]

Hi,

Please help me with a newline command in Splunk query

[harishalipaka · Accepted solution]

[Updated]

hi @v709587 try this below query

|makeresults |eval IMSI1="This is Splunk Dashboard. The list of hosts are as shown."   | makemv delim="." IMSI1 | mvexpand IMSI1 |table IMSI1

if you want to add new row try append, appendpipe

if you want to add new column try appendcols

[v709587]

This works !!!. Thank You

[v709587]

However,
"eval Impact=Column3.Column1" displays "Column1" and "Column3" as result and not the value of those parameters. Please help.

This is my query
|inputlookup file.csv | where Column1="$Column1$" and Column2="$Column2$" | return $Column3 | eval Impact=Column3.Column1 | makemv delim="." Impact | mvexpand Impact | table Impact

[v709587]

$Column1
$Column1$
"$Column1"
"$Column$"

None of the above work.

[vnravikumar]

Hi
Can you give more information, what you are really expecting?

[v709587]

eg: "This is Splunk Dashboard. The list of hosts are as shown."

I want to display these 2 lines in 2 different lines within same row, same panel.

[vnravikumar]

To understand more clearly, whether it is possible to give mock screenshot.

[v709587]

Thanks Ravi for your help