@splunkanswers This *really* should be sinpler to do … along the lines of `| eval mvindex(mvfield,ndx)=“new value”` Except mvindex isn’t supported on the left side of the equals sign ?

This *really* should be sinpler to do … along the lines of `| eval mvindex(mvfield,ndx)=“new value”`

Except mvindex isn’t supported on the left side of the equals sign ?

— Warren Myers ?? (@warrenmyers) October 24, 2019

from Twitter https://twitter.com/warrenmyers

October 24, 2019 at 03:07AM
via IFTTT