All Apps and Add-ons

nomv seems to add whitespace

markucsb
Explorer

I have a multi-valued field that I'm trying to collapse down to a single value but the nomv command adds a whitespace character between the individual values of the field. This is a Base64 encoded string that needs to be a single continuous line with no added characters or whitespace, I have a checksum with the number of characters that needs to match the value of this field's character count.
I have tried trimming the individual values prior to combining however it seems that the actual nomv command adds the whitespace characters, does anyone have any ideas of how I can solve this or is this a limitation of nomv?

0 Karma

markucsb
Explorer

I think I answered my own question, use "eval newField=mvjoin(oldField,"")

0 Karma
Get Updates on the Splunk Community!

The All New Performance Insights for Splunk

Splunk gives you amazing tools to analyze system data and make business-critical decisions, react to issues, ...

Good Sourcetype Naming

When it comes to getting data in, one of the earliest decisions made is what to use as a sourcetype. Often, ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...