Splunk Search

Powershell output containing Curly braces gets parsed as System.String[]. How to parse and extract fields within the curly braces?

saurabhkunte
Path Finder

Hello,

I hope one of you here can help me out.

I have a PowerShell script which is am running via PS modular input. Some of the output is contained in curly braces, for e.g:

DNSServerOrder : {10.191.125.141, 10.192.19.250}
DNSSuffixSearch : {a.contoso.com, b.contoso.com, c.contoso.com, c.contoso.com...}
IPAddress :{192.168.5.5}

The values for these three fields show up as 'System.String[]'. I am guessing string arrays is somehow not getting parsed at index-time. Any help how to get these fields to show the values that are enclosed within the curly braces?
Thanks

0 Karma

jconger
Splunk Employee
Splunk Employee

Can you share the bits of PoSH writing out those strings? PowerShell has internal handlers on how to display objects and you may have to tweak your Write-Host.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...