Ok, i wrote my own custom command to solve it. (plus send email with attachment custom commmand to send results)
see https://splunkbase.splunk.com/app/1832/
Ok, i wrote my own custom command to solve it. (plus send email with attachment custom commmand to send results)
see https://splunkbase.splunk.com/app/1832/
Change DELIMS = "," to DELIMS = ";" in transforms.conf. It might help you.