Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How expand two related mutli value fields ?

$
0
0
Hi, I'm trying to analyze some data that contains two related multi value fields that i want to expand. What i have looks like this: field #1 field#2 field #3 green 1,2,4 one,two,four blue 7,6 seven,six red 9 nine What I want to have green 1 one green 2 two green 4 four blue 7 seven blue 6 six red 9 nine It is easy to expand one mutlivalue field using mvexpand, but if i try to expand both fields i get duplicate rows. Any idea how i can expand both fields at the same time ? Cheers Frank

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>