Archive
Highlighted

How to trim white spaces in events in search time

Explorer

Hi,

i have an event having white spaces in between i want to trim it
the data is coming from db connect i don't have access so i need o done it in search head

Can some one help me in fixing this

0 Karma
Highlighted

Re: How to trim white spaces in events in search time

Ultra Champion
| foreach * [eval <<FIELD>> = trim('<<FIELD>>')]

all fields are trimed without _raw.

0 Karma