About yasein

yasein · ‎08-13-2015

Hi, So I have an app version1 with sourcetype definitions and eventtypes etc. Later on in version2, I moved those definitions to a separate add-on, so now without the add-on, version2 won't work. Can I do something in the app version2, so that when user is upgrading, it automatically installs that add-on? Thanks

yasein · ‎08-10-2015

Thanks. THe none KV_MODE solved my problem props.conf KV_MODE = none REPORT-field_extract = field_extract transforms.conf [field_extract] DELIMS = " ", "="

yasein · ‎08-08-2015

I have logs like msg="some string here method=aaaa" method=bbbb splunk may extract method=aaaa out of the quoted string, how can I avoid this? Thanks

Posts	3
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎08-08-2015

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Can I set an app to automatically install an add-o...

how to avoid auto extraction in quotes?

Can I set an app to automatically install an add-o...

Re: how to avoid auto extraction in quotes?

how to avoid auto extraction in quotes?