- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

rrovers
Contributor
12-07-2020
02:31 AM
With this search
index=useradmin sourcetype=role_capabilities
| eval capabilities=replace(capabilities,"\s",",")
| makemv delim="," capabilities
| table role capabilities
I expected a result like
role1 capability1
role1 capabiltity2
role1 capabitity3
role 2 capability1
instead I get
role 1 capabilty1
capabilty2
capabilty3
role 2 capability1
Probably my expectations of makemv are not correct but I can't find another command to make this work.
The reason I want it in this way is to get layout of the print of the dashboard I use this with properly.
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

493669
Super Champion
12-07-2020
03:45 AM
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

rrovers
Contributor
12-07-2020
04:03 AM
@493669, thanks, that's what I was looking for
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

493669
Super Champion
12-07-2020
04:07 AM
@rrovers Please accept it as solution to help future readers as well.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

493669
Super Champion
12-07-2020
03:45 AM
