Archive

nomv seems to add whitespace

Explorer

I have a multi-valued field that I'm trying to collapse down to a single value but the nomv command adds a whitespace character between the individual values of the field. This is a Base64 encoded string that needs to be a single continuous line with no added characters or whitespace, I have a checksum with the number of characters that needs to match the value of this field's character count.
I have tried trimming the individual values prior to combining however it seems that the actual nomv command adds the whitespace characters, does anyone have any ideas of how I can solve this or is this a limitation of nomv?

0 Karma

Explorer

I think I answered my own question, use "eval newField=mvjoin(oldField,"")

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!