Splunk Search

three are more multiple value for mvzip

rsathish47
Contributor

Hi ,

mvzip function takes two multivalue fields, I want to combine three multiple value.. Please let me if we have any workaround

Thanks
Sathihs R

Tags (2)
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

This should work:

... | eval zipped = mvzip(mvzip(mv_a, mv_b, delim_ab), mv_c, delim_bc)

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

This should work:

... | eval zipped = mvzip(mvzip(mv_a, mv_b, delim_ab), mv_c, delim_bc)

rsathish47
Contributor

Thanks Marty it worked..

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Observability Cloud and Splunk AppDynamics - May 2025

This month, we’re delivering several new innovations in Splunk Observability Cloud and Splunk AppDynamics ...

Getting Started with Splunk Artificial Intelligence, Insights for Nonprofits, and ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Splunk Observability Cloud’s AI Assistant in Action Series: Identifying Unknown ...

Agentic AI powers the Splunk AI Assistant within the Splunk Observability Cloud interface to help you quickly ...