I have a space delimited field that may contain quoted values that also include spaces. For example:
Value1 Value2 Value3 Value4 "Value with a space 5" Value6
I think I need to use makemv, however this just nets me a exactly what you would expect:
| eval temp="Value1 Value2 Value3 Value4 \"Value with a space 5\" Value6"
| makemv temp
| fields - _time
This leads me to think that I need a regex to parse it correctly, however I am no regex master. Anybody have any ideas?
... View more