Getting Data In

Underscore in props.conf stanza with source meta key

SplunkExplorer
Contributor

Hi Splunkers, I have a doubt about underscores and path in props.conf.

Suppose, in my props.conf, I have:

[source::/aaa/bbb/ccc_ddd]

As you can see, in my path I have an underscore in path name.
This could be a problem? I mean: can I put the underscore without problem or I have to use backslash to escape it?

Labels (2)
0 Karma
1 Solution

SplunkExplorer
Contributor

Solved by myself, underscores gives not problem.

View solution in original post

0 Karma

SplunkExplorer
Contributor

Solved by myself, underscores gives not problem.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...