Splunk Search

splunk delims

vinod_5279
Engager

I am getting my result table from my json log as shown below

vinod_5279_0-1598508632810.png



But i want result of my line number 10 should be like below

1.0.9                                                                           feature-Tibco Communicator
                                                                                                      Secrets Secure
                                                                                                       commons splunk dashboard

 

0 Karma
1 Solution

to4kawa
Ultra Champion

makemv delim="/n" your_fieldname

View solution in original post

0 Karma

bhoopalkiran
New Member

Use Splunk DELIMS in place of REGEX when dealing with ASCII-only delimiter-based field extractions, where field values or field/value pairs are separated by delimiters such as commas, colons, spaces, tab spaces, line breaks, and so on.

makemv delim="/n" your_fieldname

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

It looks like you need to replace "/n" with "\n" or perhaps "\n\t"

0 Karma

to4kawa
Ultra Champion

makemv delim="/n" your_fieldname

0 Karma
Get Updates on the Splunk Community!

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...