Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Convert multi-value expression to field names and values

$
0
0
I have a string,> "one:isone,two:istwo,three:isthree" The goal is to convert these to fields and values, without knowing what will be in the string. Basically the following, but automagic. | eval one="isone" | eval two="istwo" ... >

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>