<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How do I format Search Processing Language to align the pipes on the left side of the search bar? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-do-I-format-Search-Processing-Language-to-align-the-pipes-on/m-p/239793#M71253</link>
    <description>&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/6.5.0/Search/Parsingsearches#Search_bar_shortcuts"&gt;http://docs.splunk.com/Documentation/Splunk/6.5.0/Search/Parsingsearches#Search_bar_shortcuts&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;On Linux or Windows use Ctrl + \&lt;BR /&gt;
 On Mac OSX use Command + \&lt;/P&gt;</description>
    <pubDate>Wed, 16 Nov 2016 15:19:46 GMT</pubDate>
    <dc:creator>cmerriman</dc:creator>
    <dc:date>2016-11-16T15:19:46Z</dc:date>
    <item>
      <title>How do I format Search Processing Language to align the pipes on the left side of the search bar?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-do-I-format-Search-Processing-Language-to-align-the-pipes-on/m-p/239791#M71251</link>
      <description>&lt;P&gt;How do I format Search Processing Language (SPL) to align the pipes on the left side of the search bar (v 6.5.0)?&lt;/P&gt;

&lt;P&gt;&lt;EM&gt;hard to read&lt;/EM&gt;&lt;BR /&gt;
&lt;CODE&gt;index=_internal | eval ..... | convert ... | stats... | table ... | sort ...&lt;/CODE&gt;&lt;BR /&gt;
vs&lt;BR /&gt;
&lt;EM&gt;pretty print&lt;/EM&gt;&lt;BR /&gt;
&lt;PRE&gt;&lt;BR /&gt;
index=_internal&lt;BR /&gt;
| eval .....&lt;BR /&gt;
| convert ...&lt;BR /&gt;
| stats...&lt;BR /&gt;
| table ...&lt;BR /&gt;
| sort ...&lt;BR /&gt;
&lt;/PRE&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 16 Nov 2016 15:05:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-do-I-format-Search-Processing-Language-to-align-the-pipes-on/m-p/239791#M71251</guid>
      <dc:creator>Kyle_Jackson</dc:creator>
      <dc:date>2016-11-16T15:05:22Z</dc:date>
    </item>
    <item>
      <title>Re: How do I format Search Processing Language to align the pipes on the left side of the search bar?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-do-I-format-Search-Processing-Language-to-align-the-pipes-on/m-p/239792#M71252</link>
      <description>&lt;P&gt;probably you are meaning&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=_internal 
| eval ..... 
| convert ... 
| stats... 
| table ... 
| sort ...
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Every way in 6.5 version there is an indentation of all source's tags with the only exception of searches.&lt;BR /&gt;
If you want to indent also searches (I usually do it!) you have to manually do it.&lt;BR /&gt;
Fortunately from 6.5 indentation remains also if I enter in Panels search modify, instead in the previous version if you do this you lose indentation.&lt;BR /&gt;
Bye.&lt;BR /&gt;
Giuseppe&lt;/P&gt;</description>
      <pubDate>Wed, 16 Nov 2016 15:15:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-do-I-format-Search-Processing-Language-to-align-the-pipes-on/m-p/239792#M71252</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2016-11-16T15:15:26Z</dc:date>
    </item>
    <item>
      <title>Re: How do I format Search Processing Language to align the pipes on the left side of the search bar?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-do-I-format-Search-Processing-Language-to-align-the-pipes-on/m-p/239793#M71253</link>
      <description>&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/6.5.0/Search/Parsingsearches#Search_bar_shortcuts"&gt;http://docs.splunk.com/Documentation/Splunk/6.5.0/Search/Parsingsearches#Search_bar_shortcuts&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;On Linux or Windows use Ctrl + \&lt;BR /&gt;
 On Mac OSX use Command + \&lt;/P&gt;</description>
      <pubDate>Wed, 16 Nov 2016 15:19:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-do-I-format-Search-Processing-Language-to-align-the-pipes-on/m-p/239793#M71253</guid>
      <dc:creator>cmerriman</dc:creator>
      <dc:date>2016-11-16T15:19:46Z</dc:date>
    </item>
  </channel>
</rss>

