I have logs that resemble the table below. index=linux sourcetype=group | table group group_id, users group group_id users splunk 1 admin, john, jill apache 2 sarah, bill   I would like the events to be separated by individual users so it looks like the table below. Is there a way to utilize transforms/props to separate the events by each different user?  index=linux sourcetype=group | table group group_id, users group group_id users splunk 1 admin splunk 1 john splunk 1 jill apache 2 sarah apache 2 bill ... View more