Splunk Search

How do I configure a custom file delimiter

bnasello
New Member

I only see 4 delimiter type available in plunk ( commas, tabs, pipes, and spaces) I have a file that has asterisks (*) as a delimiter. How can I add this as a custom delimiter?

Thanks.

Tags (1)
0 Karma
1 Solution

jtrucks
Splunk Employee
Splunk Employee

You can change this in props.conf. The documentation says:

FIELD_DELIMITER =
* Tells Splunk which character delimits or separates fields in the
specified file or source.
* This attribute supports the use of the special characters described
above.

View solution in original post

jtrucks
Splunk Employee
Splunk Employee

You can change this in props.conf. The documentation says:

FIELD_DELIMITER =
* Tells Splunk which character delimits or separates fields in the
specified file or source.
* This attribute supports the use of the special characters described
above.

*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>