Using the coalesce Command
Data fields that have similar information can have different field names. While the Splunk Common Information Model (CIM) exists to address this type of situation,
Category: Search Command of the Week
Makemv Command in Splunk: The Beginner’s Guide
Have you ever been stuck with a single field that needed to provide you with a little more… value? The makemv command adds that value.