Is it possible to change the delimiter (currently , ) to something else?
I have multivalue fields where the content has "," in them.
Perhaps writing the cell multiline text would help?
I meant for the excel export. I need to reproduce it i fear - i might have mixed up two "issues". I get jumbled output tables with multivalue fields containing "," like LDAP DNs etc. The other issue is that i would like to modify the csv export result from scheduled searches etc. Sorry.
This is because the FR delimiter is ";"? And you do mean for the Excel Export app, not Splunk's native CSV Export?
See this document:
The useful example here is:
[commalist]
DELIMS = ", "
FIELDS = field1, field2, field3
I think this is exactly what you're looking for to solve the question you're asking.
nope
the values are DN from a directory and i just want to not use "," as the delimiter and not parse the values just output them to a multiline textfield.
I am hoping for the developer to chime in 🙂