topic Re: How do I go about sending multi-lined string variables to Splunk? in Splunk Dev https://community.splunk.com/t5/Splunk-Dev/How-do-I-go-about-sending-multi-lined-string-variables-to-Splunk/m-p/341515#M5242 <P>Simple enough... multivalue values are strings in a list</P> <PRE><CODE>file = open(file_path,"r") results = [] content = file.readlines() result = {} result["ldif"] = content results.append(result) file.close() splunk.Intersplunk.outputResults(results) </CODE></PRE> Wed, 20 Sep 2017 08:58:48 GMT dominiquevocat 2017-09-20T08:58:48Z How do I go about sending multi-lined string variables to Splunk? https://community.splunk.com/t5/Splunk-Dev/How-do-I-go-about-sending-multi-lined-string-variables-to-Splunk/m-p/341512#M5239 <P>splunk.intersplunk.outputResults output multiline strings in a field</P> <P>I have multi-line results which I would like to output as a multi-lined text in a field.</P> <P>Splunk is doing some cleaning in fields like stripping leading spaces and ignoring linefeed. <BR /> How would I go about sending multi-lined string variable to Splunk?</P> Mon, 18 Sep 2017 14:31:06 GMT https://community.splunk.com/t5/Splunk-Dev/How-do-I-go-about-sending-multi-lined-string-variables-to-Splunk/m-p/341512#M5239 dominiquevocat 2017-09-18T14:31:06Z Re: How do I go about sending multi-lined string variables to Splunk? https://community.splunk.com/t5/Splunk-Dev/How-do-I-go-about-sending-multi-lined-string-variables-to-Splunk/m-p/341513#M5240 <P>Hmm this is really unclear, you need to provide us samples of what the data in splunk looks like and what you expect?</P> Mon, 18 Sep 2017 18:19:34 GMT https://community.splunk.com/t5/Splunk-Dev/How-do-I-go-about-sending-multi-lined-string-variables-to-Splunk/m-p/341513#M5240 Sukisen1981 2017-09-18T18:19:34Z Re: How do I go about sending multi-lined string variables to Splunk? https://community.splunk.com/t5/Splunk-Dev/How-do-I-go-about-sending-multi-lined-string-variables-to-Splunk/m-p/341514#M5241 <P>example:</P> <P>data i would like to give back to splunk:</P> <PRE><CODE>dn: cn=someuser,cn=people,ou=company,dc=domain,dc=com changetype: add cn: someuser groupmembership: cn=group1,ou=groups,dc=domain,dc=com groupmembership: cn=group2,ou=groups,dc=domain,dc=com </CODE></PRE> <P>the way it looks in splunk:</P> <PRE><CODE>dn: cn=someuser,cn=people,ou=company,dc=domain,dc=com changetype: add cn: someuser groupmembership: cn=group1,ou=groups,dc=domain,dc=com groupmembership: cn=group2,ou=groups,dc=domain,dc=com </CODE></PRE> <P>so yeah, a multilined text is presented as a single line, stripped of linefeeds and extra whitespace.</P> Tue, 19 Sep 2017 10:45:54 GMT https://community.splunk.com/t5/Splunk-Dev/How-do-I-go-about-sending-multi-lined-string-variables-to-Splunk/m-p/341514#M5241 dominiquevocat 2017-09-19T10:45:54Z Re: How do I go about sending multi-lined string variables to Splunk? https://community.splunk.com/t5/Splunk-Dev/How-do-I-go-about-sending-multi-lined-string-variables-to-Splunk/m-p/341515#M5242 <P>Simple enough... multivalue values are strings in a list</P> <PRE><CODE>file = open(file_path,"r") results = [] content = file.readlines() result = {} result["ldif"] = content results.append(result) file.close() splunk.Intersplunk.outputResults(results) </CODE></PRE> Wed, 20 Sep 2017 08:58:48 GMT https://community.splunk.com/t5/Splunk-Dev/How-do-I-go-about-sending-multi-lined-string-variables-to-Splunk/m-p/341515#M5242 dominiquevocat 2017-09-20T08:58:48Z