Getting Data In

Props.conf stanza matching hosts with literal pipe in name?

muebel
SplunkTrust
SplunkTrust

I would like to build a props stanza for hosts that have a literal pipe in their name. I have tried a few different formulations of this, which are:

[host::*\|*]

[host::(*\|*)]

[host::[^|]+\|[^/]+]

(this one just mapped to all hosts)
[host::*|*]

I would expect that I could just escape the pipe in the props spec, but this isn't working. Does anybody have any insight on this?

0 Karma
1 Solution

muebel
SplunkTrust
SplunkTrust

This wasn't possible, and so I ended up switching to an alternative set of characters, namely "<" and ">"

View solution in original post

0 Karma

muebel
SplunkTrust
SplunkTrust

This wasn't possible, and so I ended up switching to an alternative set of characters, namely "<" and ">"

0 Karma
Get Updates on the Splunk Community!

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...

Security Highlights | January 2023 Newsletter

January 2023 Splunk Security Essentials (SSE) 3.7.0 ReleaseThe free Splunk Security Essentials (SSE) 3.7.0 app ...

Platform Highlights | January 2023 Newsletter

 January 2023Peace on Earth and Peace of Mind With Business ResilienceAll organizations can start the new year ...