Hi, I am trying to create a table for data values in the list but I am able to get the first one only. The query I am using: convert timeformat="%m/%d/%Y %H:%M:%S" mktime(_time)| rex field=_raw "\"DATALIST_R[0-9]{4}_C0001\":\"(?<DATALIST_C0001>.*?)\""| rex field=_raw "\"DATALIST_R[0-9]{4}_C0002\":\"(?<DATALIST_C0002>.*?)\""| eval zip = mvzip(DATALIST_C0001,DATALIST_C0002 )| mvexpand zip | rex field=zip "(?<task>.*),(?<dataVal>.*)" | table _time, Key, zip,task, dataVal Raw data is: "DATALIST_Format":"list","DATALIST_Unit":"percent","DATALIST_Date":"04/10/2019 09:01:30","DATALIST_R0001_refno":1,"DATALIST_R0001_percent":0.007,"DATALIST_R0001_C0001":"CLASS1","DATALIST_R0001_C0002":0.007,"DATALIST_R0002_refno":2,"DATALIST_R0002_percent":0.004,"DATALIST_R0002_C0001":"CLASS2","DATALIST_R0002_C0002":0.004,"DATALIST_R0003_refno":3,"DATALIST_R0003_percent":0.004,"DATALIST_R0003_C0001":"CLASS3","DATALIST_R0003_C0002":0.004,"DATALIST_R0004_refno":4,"DATALIST_R0004_percent":0.003,"DATALIST_R0004_C0001":"CLASS12","DATALIST_R0004_C0002":0.003 Fields data is: DATALIST_Format: list DATALIST_R0001_C0001: CLASS1 DATALIST_R0001_C0002: 0.007 DATALIST_R0001_percent: 0.007 DATALIST_R0001_refno: 1 DATALIST_R0002_C0001: CLASS2 DATALIST_R0002_C0002: 0.004 DATALIST_R0002_percent: 0.004 DATALIST_R0002_refno: 2 DATALIST_R0003_C0001: CLASS3 DATALIST_R0003_C0002: 0.004 DATALIST_R0003_percent: 0.004 DATALIST_R0003_refno: 3 DATALIST_R0004_C0001: CLASS12 DATALIST_R0004_C0002: 0.003 DATALIST_R0004_percent: 0.003 DATALIST_R0003_refno: 4 ... View more