multivalue field

noun

A field that has more than one value. Fields usually have a single value, but for events such as email logs, you'll often find multivalue fields in the "To:" and "Cc:" information.

You can use Splunk's search language to separate multivalue fields into single value fields, or combine single values into one field.

For more information

In the Knowledge Manager Manual:

• Configure multivalue fields

In the User Manual:

• Manipulate and evaluate multivalue fields

• Alphabetical
• By Topic