Hello all !  Can anyone help me in editing the below SPL so it can only list the _key - value paris for the entities ?  | rest splunk_server=local /servicesNS/nobody/SA-ITOA/itoa_interface/entity report_as=text fields="_key,title,identifier,informational,identifying_name" | eval value=spath(value,"{}") | mvexpand value | eval entity_title=spath(value, "title"), entity_name=spath(value, "identifying_name"), entity_aliases=mvzip(spath(value, "identifier.fields{asd}"),spath(value, "identifier.values{}"),"="), entity_info=mvzip(spath(value, "informational.fields{}"),spath(value, "informational.values{}"),"=") This is a solution i found online but its rather complicated for my SPL skills at the moment....  Thank you in advance !  ... View more