Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How do you change one value in a multivalue field?

$
0
0
I have tried | eval mvindex(mvfield,0)="my new value" But it does not work. Is it even possible to change/replace/delete a single value in a multivalue field?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>