I would like to break "X" field into multiple field based on available value. "X" contain data in following format.
Field X-
ABC: YES, APPLICATION: DEF, ZONE: DATA, ENVIRONMENT: DEV
ZONE: INSIDE, ENVIRONMENT: PROD
ZONE: OUTSIDE, ENVIRONMENT: DEV, ABC: YES, APPLICATION: IJK
=======
I would like the arrange data in following format.
ABC APPLICATION ZONE ENVIRONMENT
YES DEF DATA DEV
INSIDE PROD
YES IJK OUTSIDE DEV
TIA.
The bit before the blank lines just sets up dummy data for the runanywhere example
| makeresults
| eval X=split("ABC: YES, APPLICATION: DEF, ZONE: DATA, ENVIRONMENT: DEV|ZONE: INSIDE, ENVIRONMENT: PROD|ZONE: OUTSIDE, ENVIRONMENT: DEV, ABC: YES, APPLICATION: IJK","|")
| mvexpand X
| eval _raw=X
| extract pairdelim="," kvdelim=":"
The bit before the blank lines just sets up dummy data for the runanywhere example
| makeresults
| eval X=split("ABC: YES, APPLICATION: DEF, ZONE: DATA, ENVIRONMENT: DEV|ZONE: INSIDE, ENVIRONMENT: PROD|ZONE: OUTSIDE, ENVIRONMENT: DEV, ABC: YES, APPLICATION: IJK","|")
| mvexpand X
| eval _raw=X
| extract pairdelim="," kvdelim=":"
Thank you so much. Solution works...