Answer by warren for Splunk search – How to loop on multi values field

Something like the following should work to get the most-recent status:

index=ndx sourcetype=srctp Id=* Version=* Status=* EventTime=* state=*
| stats latest(Status) as Status latest(Version) as Version latest(state) state latest(EventTime) as "Event Time" by Id

from User warren – Stack Overflow https://stackoverflow.com/questions/65717013/splunk-search-how-to-loop-on-multi-values-field/65740112#65740112
via IFTTT