Splunk Enterprise

When/Where did punct change from 30 to 50 chars?


In the splexicon, punct is stated as being "the first thirty" chars, but in Splunk Enterprise 7.3.1, I see it truncates at 50.

  • In what version did this change?
  • Where this this indexed/default extraction configured?


Tags (2)
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!