splunk merge field values

[viku7474]

I have a field called environment which has values like dev,prod,uat,sit.
Now I want to create a new_field which all the field values of environment field.

Example: (4 field values)
environment 
dev
prod
uat
sit

After query: ( 1 field value, separated by any string)
merge_environment= dev | prod | uat | sit

How to achieve this?

[ITWhisperer · Accepted solution]

Space separated

| stats values(environment) as merge_environment
| nomv merge_environment

[viku7474]

@ITWhisperer  Thank you!!

It works, Since I am passing this token in mail subject, can I separate it by comma or hyphen.?

[ITWhisperer]

Instead of using nomv, try this

| eval merged_environment=mvjoin(merged_environment, ",")