<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Splunk 6.5. Issue with Sort and Fields like commands in Installation</title>
    <link>https://community.splunk.com/t5/Installation/Splunk-6-5-Issue-with-Sort-and-Fields-like-commands/m-p/245260#M9027</link>
    <description>&lt;P&gt;Hi Praveenkpatidar, &lt;/P&gt;

&lt;P&gt;Not sure your queries in question are related to this, but you can try setting the following in props.conf to turn off the trimming logic: &lt;/P&gt;

&lt;P&gt;KV_TRIM_SPACES = false&lt;/P&gt;

&lt;P&gt;Please refer to this topic for detailed information: &lt;BR /&gt;
&lt;A href="http://docs.splunk.com/Documentation/Splunk/6.5.0/Admin/Propsconf" target="_blank"&gt;http://docs.splunk.com/Documentation/Splunk/6.5.0/Admin/Propsconf&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;Hope it helps. Thanks!&lt;BR /&gt;
Hunter&lt;/P&gt;</description>
    <pubDate>Tue, 29 Sep 2020 11:24:52 GMT</pubDate>
    <dc:creator>hunters_splunk</dc:creator>
    <dc:date>2020-09-29T11:24:52Z</dc:date>
    <item>
      <title>Splunk 6.5. Issue with Sort and Fields like commands</title>
      <link>https://community.splunk.com/t5/Installation/Splunk-6-5-Issue-with-Sort-and-Fields-like-commands/m-p/245259#M9026</link>
      <description>&lt;P&gt;Hello Team,&lt;/P&gt;

&lt;P&gt;We have dashboards with queries containing commands like sort -  and fields - , what we found after upgrading 6.5. &lt;/P&gt;

&lt;P&gt;what we found is the dashboard is automatically updating queries and removing spaces. This in result causing us no data found for the queries. We compared the same dashboard queries in 6.4.2. The automatic trimming happening in 6.5 only. &lt;/P&gt;

&lt;P&gt;Any help much appreciated. Seems problem with "-" symbol only &lt;BR /&gt;
THanks &lt;BR /&gt;
Praveen&lt;/P&gt;</description>
      <pubDate>Thu, 13 Oct 2016 04:21:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Installation/Splunk-6-5-Issue-with-Sort-and-Fields-like-commands/m-p/245259#M9026</guid>
      <dc:creator>praveenkpatidar</dc:creator>
      <dc:date>2016-10-13T04:21:30Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk 6.5. Issue with Sort and Fields like commands</title>
      <link>https://community.splunk.com/t5/Installation/Splunk-6-5-Issue-with-Sort-and-Fields-like-commands/m-p/245260#M9027</link>
      <description>&lt;P&gt;Hi Praveenkpatidar, &lt;/P&gt;

&lt;P&gt;Not sure your queries in question are related to this, but you can try setting the following in props.conf to turn off the trimming logic: &lt;/P&gt;

&lt;P&gt;KV_TRIM_SPACES = false&lt;/P&gt;

&lt;P&gt;Please refer to this topic for detailed information: &lt;BR /&gt;
&lt;A href="http://docs.splunk.com/Documentation/Splunk/6.5.0/Admin/Propsconf" target="_blank"&gt;http://docs.splunk.com/Documentation/Splunk/6.5.0/Admin/Propsconf&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;Hope it helps. Thanks!&lt;BR /&gt;
Hunter&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 11:24:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Installation/Splunk-6-5-Issue-with-Sort-and-Fields-like-commands/m-p/245260#M9027</guid>
      <dc:creator>hunters_splunk</dc:creator>
      <dc:date>2020-09-29T11:24:52Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk 6.5. Issue with Sort and Fields like commands</title>
      <link>https://community.splunk.com/t5/Installation/Splunk-6-5-Issue-with-Sort-and-Fields-like-commands/m-p/245261#M9028</link>
      <description>&lt;P&gt;Do you have a a simple example that shows your problem?&lt;/P&gt;</description>
      <pubDate>Wed, 02 Nov 2016 16:57:18 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Installation/Splunk-6-5-Issue-with-Sort-and-Fields-like-commands/m-p/245261#M9028</guid>
      <dc:creator>ziegfried</dc:creator>
      <dc:date>2016-11-02T16:57:18Z</dc:date>
    </item>
  </channel>
</rss>

