remove space and tab char between from ">" "<\"

jangid — Tue, 24 Jul 2012 16:11:33 GMT

I want to remove all the spaces in between ">" "<\" and want to use this in SEDCMD

Here is my regex but this is not working

SEDCMD-RemoveSpaceChar = s/">\s+<\\"/""/g

Re: remove space and tab char between from ">" "<\"

Ayn — Tue, 24 Jul 2012 16:15:55 GMT

So does the string you're matching against actually contain \" with backslash and everything?

Re: remove space and tab char between from ">" "<\"

Gilberto_Castil — Mon, 28 Sep 2020 12:08:16 GMT

If you are looking to remove whitespaces, the best approach is to focus on situations where you see more than one whitespace and remove. You can accomplish that with the following;

SEDCMD-remove-white-space = s/\s{2,}//g

To test this during an in-line search, use this:

sourcetype=xml_blah blah blah | rex mode=sed "s/\s{2,}//g"

This will translate this:

<xml_property_document>

    <xml_property_outer xml_variable=variable value>

        <xml_property_inner>inner property value</xml_property_inner>

    </xml_property_outer>

</xml_property_document>

Into this:

<xml_property_document><xml_property_outer xml_variable=variable value><xml_property_inner>inner property value</xml_property_inner></xml_property_outer></xml_property_document>

I do not think the SEDCMD command will allow you to capture the "<" and ">" characters and not replace them.

BTW: The reason we opt for anything beyond a single white space is because XML may contain spaces in the presented values, as well is in tree-branch variables. After all, you do not want to remove all spaces; just the extra items that make it difficult for a human to read.

Good luck.

topic Re: remove space and tab char between from ">" "<\" in Getting Data In

remove space and tab char between from ">" "<\"

Re: remove space and tab char between from ">" "<\"

Re: remove space and tab char between from ">" "<\"