Question : split command in splunk
Answered by : worrisome-wildebeest-vtk87h0bvf5w
your base search | eval temp=split(FieldA,".") | eval FieldB=mvindex(temp,0)| eval FieldC=mvindex(temp,1)| eval FieldD=mvindex(temp,2) | fields - temp
Source : https://answers.splunk.com/answers/136067/how-split-up-a-string-into-multiple-fields.html | Last Update : Tue, 12 May 20