I have a log events that looks like this... "name|fname|desc|group|cat|exp|set|in abc|abc||Administrators;Users|S||1|1 bbb|bbb|Internal||N||2|2 ccc|ccc|MFT Service ID|Administrators;Users|S||3|3" the log event's text is delimited by 6 spaces... What splunk query do I use to create splunk table like this name fname desc group cat exp set in abc abc Administrators;Users S 1 1 bbb bbb Interna N 2 2 ccc ccc MFT Service ID Administrators;Users S 3 3
... View more