thanks!  this worked great for me as well.  (nagendra008 's split method , not the css way) (i didnt want to mess with CSS nor make a new app for a quick table). if this helps others,  i used the blank space as the linebreak / replace char; | eval dateonly=strftime(_time, "%m-%d %A %I:%M%P") | eval dateonly= split(dateonly," ") so i ended up with exactly what i wanted  🙂  -   vs this before 😐 (unrelated- what is up with the login process for the forums here?  its now login on page 1, pw on page2, which breaks chrome and FF password save/remember.  maybe they are doing this to fight off bruteforce/bots?  etherway its pretty annoying as i now have to lookup + type both 😞   ... View more

@nagendra008 for the community to assist you better you would have to provide more details from your existing SimpleXML for example which visualization is this setting for? If you can provide a simple XML code snippet of the dashboard where you have used name="fields" and what purpose does it solve for you in 6.3, it would be easier for community experts to assist. Also by latest do you mean you are upgrading to Splunk 8.x? ... View more

Can you install latest version of MLTK and use statespace algorithm? ... View more

First answer here shows how to do what you need, without CSS https://answers.splunk.com/answers/204419/do-this-in-simple-xml.html ... View more

I'm not sure. Have you simplified that syntax before posting the comment? As written it makes no sense that the if() would fall through to the "ccccc". Also, "part-m-00009" is a pretty unusual value for "source". Have you translated field names or something? Can you post the actual question you have as a separate question? It's a bit confusing to have these tin_provider comments in here since it has nothing to do with this user's question. ... View more

Thanks bruceclarke , it works fine, It was really appreciated. Regards, Nagee ... View more

Hi Gfreitas, On my understanding lookup will be helpful only with small data, Lookup performance is less when we try to use with millions of records. Regards, Nagee. ... View more