Need to change the field delimiter after extraction

[prachisaxena]

example as below.
The output that i am receiving is separated by commas.. it is possible to get the output separated by pipe

sample text: HAM|582431977|PANASONIC INSURANCE SERVICE CO|xyz@email.com
Current output: HAM,PANASONIC INSURANCE SERVICE CO
Required output: HAM | PANASONIC INSURANCE SERVICE CO

props.conf
[sourcetype]
TRANSFORMS-set = setnullci,setparsingci
REPORT-ci = REPORT-ci

transforms.conf
[setparsingci]
REGEX = (?P[^|])|(?P[^|])|(?P[^|])|(?P[^|])
DEST_KEY = _raw
FORMAT = $1,$3

[REPORT-ci]
DELIMS = ","
FIELDS = "field1","field3"

[richgalloway · Accepted solution]

Change the delimiter used in transforms.conf.

FORMAT = $1|$3

FIELDS = "field1"|"field3"