Solved: Re: Need Help with Splunk Query - Splunk Community

Splunk Search

Hi,

Can any one please help me with the query currently iam using " | rename * AS \|*\| " but i don't want \ in the header so i want like |PeriodDate| only.

\\|PeriodDate\\|	\\|VendorName\\|	\\|ContractName\\|	\\|Code\\|
\|2021/12/19\|	\|SAM\|	\|HI-HI\|	\|511\|
\|2021/12/19\|	\|SAM\|	\|HI-HI\|	\|51.1\|
\|2021/12/19\|	\|SAM\|	\|HI-HI\|	\|51.1\|

1 Solution

Solution

looks it worked with | rename * AS "|*|"

View solution in original post

Solution

looks it worked with | rename * AS "|*|"

Get Updates on the Splunk Community!

Value Insights: Now Generally Available in the CMC

Organizations are under pressure to move faster, control cost, expand AI adoption, and prove value with more ...

What’s New in Splunk AI: Volume 02

Welcome to the second edition of “What’s New in Splunk AI” where we look at the latest and greatest updates, ...

Splunk App Dev Quarterly Roundup: AI, Agents, and Innovation!

Another quarter, another wave of innovation. From complex integrations to pushing the limits ...