×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
nithish
Loves-to-Learn
Member since: ‎04-17-2018
‎08-29-2023
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎04-17-2018
Topics I've Started
No posts to display.
View All

Re: Ignoring any data record that begins with a "#...

by in Getting Data In
‎11-24-2021 12:14 AM
‎11-24-2021 12:14 AM
I had similar issue and below props and transforms worked for me in my scenario where it ignored the lines started with #: transforms.conf: [setnull] REGEX=^[#\r\n] DEST_KEY=queue FORMAT=nullQueue props.conf: [sourcetype] TRANSFORMS-ignore_comments = setnull ... View more

Re: How can I not index commented lines from my fi...

by in Splunk Search
‎11-24-2021 12:11 AM
‎11-24-2021 12:11 AM
I had similar issue and nothing worked for me. Below props and transforms worked for me in my scenario where it ignored the lines started with #: transforms.conf: [setnull] REGEX=^[#\r\n] DEST_KEY=queue FORMAT=nullQueue props.conf: [sourcetype] TRANSFORMS-ignore_comments = setnull ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎08-29-2023 05:44 PM