I have multiline events and I need to identify which line number a search string appears in. Preferred would be a solution that avoids breaking entire event into multivalue fields.
e.g. this would return 4
blah blah
blah blah
blah blah
what I want to know line number of
blah blah
blah blah
blah blah
this would return 2
blah blah
what I want to know line number of
blah blah
blah blah
blah blah
blah blah
I ended up going with multivalue field solution and mvfind/mvindex solution for this. Expensive but worked.
I ended up going with multivalue field solution and mvfind/mvindex solution for this. Expensive but worked.
Can you publish your solution please