Hi
I have the following data written to one field. When i run
source_SERVICES_count=mvcount(source_SERVICES)
i get the answer of 1. However there are 3 results!
So when i am writing the answer do i have to tell Spunk expect a multi value field?
Or how can i get the mvcount to count the number of spaces to display 2?
/dell872srv/apps/UBS_QCST_SEC2/logs/archive/300118_0937/mxsmcobjectrepository/smcobjectrepository_engine/566460-109829-service.log /dell872srv/apps/UBS_QCST_SEC2/logs/mxsmcobjectrepository/smcobjectrepository_engine/566460-109829-service.log /dell872srv/apps/UBS_QCST_SEC2/logs/mxsmcobjectrepository/smcobjectrepository_engine/986086-109829-service.log
Thanks in Advance
Rob
That a field has embedded spaces does not necessarily make it a multi-valued field. It depends on how the field is created.
Try this option: eval source_SERVICES_count=mvcount(split(source_SERVICES, " "))
.
That a field has embedded spaces does not necessarily make it a multi-valued field. It depends on how the field is created.
Try this option: eval source_SERVICES_count=mvcount(split(source_SERVICES, " "))
.
Perfect, thanks 🙂