Splunk Search

how remove extra new line?

alina_mandarina
New Member

alt text
i need that all lines will be one line, without newline

0 Karma

dmarling
Builder

At search time you can run this sed statement to remove all line breaks:

search string
| rex mode=sed field=_raw "s/\n/ /g"

Here's a regex 101 example showing the results: https://regex101.com/r/uNUBum/1

If this comment/answer was helpful, please up vote it. Thank you.
0 Karma
Get Updates on the Splunk Community!

The All New Performance Insights for Splunk

Splunk gives you amazing tools to analyze system data and make business-critical decisions, react to issues, ...

Good Sourcetype Naming

When it comes to getting data in, one of the earliest decisions made is what to use as a sourcetype. Often, ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...