I only see 4 delimiter type available in plunk ( commas, tabs, pipes, and spaces) I have a file that has asterisks (*) as a delimiter. How can I add this as a custom delimiter?
Thanks.
You can change this in props.conf. The documentation says:
FIELD_DELIMITER =
* Tells Splunk which character delimits or separates fields in the
specified file or source.
* This attribute supports the use of the special characters described
above.
You can change this in props.conf. The documentation says:
FIELD_DELIMITER =
* Tells Splunk which character delimits or separates fields in the
specified file or source.
* This attribute supports the use of the special characters described
above.