title: How to get data from _raw in Splunk
body: <p>I have this search query:</p>
  <pre><code>index=&quot;abc&quot; |search SomeInfo | table _raw
  </code></pre>
  <p>and it returns table with results in one column in this format:</p>
  <pre><code>2020-09-10 15:57:24,479 [the_value_i_need] INFO  java.class.name:52 - SomeInfo|NAME=NAME1 
  2020-09-10 16:57:33,479 [the_value_i_need] INFO  java.class.name:52 - SomeInfo|NAME=NAME1 
  2020-09-10 17:58:24,479 [the_value_i_need] INFO  java.class.name:52 - SomeInfo|NAME=NAME1 
  </code></pre>
  <p>Now, how do I get value &quot;the_value_i_need&quot; in square brackets[] and display it in the table instead of showing everything from _raw?</p>