Hi @uagraw01 Im not sure how you ended up with this list, there may be a better way, but if you really do need to split these back out then the following snippet should work - This combined the fie...
See more...
Hi @uagraw01 Im not sure how you ended up with this list, there may be a better way, but if you really do need to split these back out then the following snippet should work - This combined the fields into a single JSON string so you can use mvexpand once. | foreach FunctionGroup mode=multivalue [
|eval json=mvappend(json, "{".
"\"FunctionGroup\":\"".mvindex(FunctionGroup,<<ITER>>)."\",".
"\"MsgNr\":\"".mvindex(MsgNr,<<ITER>>)."\",".
"\"alarm_severity\":\"".mvindex(alarm_severity,<<ITER>>)."\",".
"\"area\":\"".mvindex(area,<<ITER>>)."\",".
"\"equipment\":\"".mvindex(equipment,<<ITER>>)."\"".
"}"
)
]
| mvexpand json | eval _raw=json | fields _raw | spath Ive tested it as best as I can: Did this answer help you? If so, please consider: Adding karma to show it was useful Marking it as the solution if it resolved your issue Commenting if you need any clarification Your feedback encourages the volunteers in this community to continue contributing