Dashboards & Visualizations

Splunk Custom Command Trimming Spaces in Fields

New Member

Hi All,

I observed in Splunk Query Language that,

  • Any field’s values are getting trimmed after going through Splunk’s Custom Command’s execution.
  • Commands are developed using Splunk’s API and we are not touching those fields inside the command.
  • In configurations(commands.conf) found there is no such property values which can avoid this.


With Custom Command

With Custom Command.jpg

Without Custom Command

Without Custom Command.jpg

Custom Command Code,

import splunk.Intersplunk

results,unused1,unused2 = splunk.Intersplunk.getOrganizedResults()

keywords, argvals = splunk.Intersplunk.getKeywordsAndOptions()

field = argvals.get("field")

for r in results:


        r[field] = r[r[field]]

    except Exception, e:

        r[field] = None


Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Life | Happy Pride Month!

Happy Pride Month, Splunk Community! 🌈 In the United States, as well as many countries around the ...

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...

Admin Your Splunk Cloud, Your Way

Join us to maximize different techniques to best tune Splunk Cloud. In this Tech Enablement, you will get ...