Greetings! We are trying to generate a table after we got output from a Splunk query. We are trying pipe (|) this to our query but do not know how to do this. Can someone assist?  This is the output after we ran our Splunk query, Feb 13 20:36:21 hostname1 sshd[100607]: pam_unix(sshd:session): session opened for user user123 by (uid=0) Feb 13 20:36:23 hostname2 sshd[100608]: pam_unix(sshd:session): session opened for user user345 by (uid=0) We want to capture the table in this form, Time                                   Hosts                       Users Feb 13 20:36:21       hostname1                user123 Feb 13 20:36:23       hostname2                user345 And so on.. How do we do this. Thank you in advance! ... View more