Take for example the following query:
| eval somevalue=" Hello World!"
| table somevalue
Notice how "Hello World!" has a bunch of spaces in front of it. When I use the table command the resulting Statistics Table strips out all of the white space:
Is there a way to preserve this white space so it is included in the table? I know it sounds odd, but for my production data I really need it.
Upgrade to v7.??? In 7.2 it preserves leading whitespace AND no longer displays newlines as spaces!
I tested this behavior on different Splunk version and found out that from Splunk version 6.6.xx and above it preserves those spaces and shows in the table.
I checked in Splunk 22.214.171.124, I'm getting the leading space