I have a field name hosts which has values as:
10.128.193.39,10.128.193.52,10.128.193.47,10.128.193.55,10.128.193.40,10.128.193.49,10.128.193.42,10.128.193.41,10.128.193.37
What functionality within Splunk I can use to strip these addresses and create a new field with a list of all these as separate values rather than just one value that holds all of them? Not sure if I have to use regex?
Output
10.128.193.39
10.128.193.52
10.128.193.47
Try this (skip the mvexpand if you want to keep is mv)
... | makemv hosts delim="," | mvexpand hosts