A convenience feature was introduced in 7 (well I noticed it in a Splunk 7 installation and not in 5 and 6) that automatically inserts a new line when a pipe sign ("|") is typed at the end of a line. I no longer see this behavior in 8. Is this feature deprecated? Or is there a setting to enable/disable it?
That feature still exists and is not deprecated, but may be disabled. Click on your name in the top-right corner of a Splunk window and select Preferences. Click on the SPL Editor tab and make sure "Search auto-format" is on.
That feature still exists and is not deprecated, but may be disabled. Click on your name in the top-right corner of a Splunk window and select Preferences. Click on the SPL Editor tab and make sure "Search auto-format" is on.