Splunk Search

Spaces are being replaced by tabs

stevennoble
Explorer

I've noticed that in a few logs places where I have four spaces in a row are being substituted with a space and a tab. This is breaking regex rules. Is this a default setting I can find somewhere? Any idea where I can look to see what's causing this?

Tags (1)
0 Karma
1 Solution

sciurus
Path Finder

Are you sure it's not in the source data?

You could also change the regex's to use \s+ instead of literal spaces.

View solution in original post

sciurus
Path Finder

Are you sure it's not in the source data?

You could also change the regex's to use \s+ instead of literal spaces.

Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...