Splunk Search

query return a list

shavitpren
Loves-to-Learn

hi, i want to return a result as a filed  with list of raw

 

my data is:

Product : A, SubProcut: A1, Status :1

Product : A, SubProcut: A2, Status :1

Product : A, SubProcut: A3, Status :2

Product : B, SubProcut: B1, Status :1

 

I want to query that result will be:

prodduct A, Status 2, subProducts: [A1,A2,A3], Status: 2

prodduct A, Status 2, subProducts: [B1], Status: 1

Labels (2)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Your query results are not consistent with your data. What are you trying to get from your data?

0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...