Splunk Search

Spaces removed from query - repeatable

moorvogi
Path Finder

We have a report that runs and when you edit the report in the edit window, it will strip the space if the line wraps to the next line of text but is the same content line... here's a mockup of the query showing line numbers as the Edit search window does.

1 | tstats blah blah.. stuff and more stuff
           even more stuff for line one
2 | rename fields from above etc etc
3 | table fieldname fieldname2 etc

if the above is put into the edit window, the space between "stuff" and "even" gets removed when you save it. Is there a way to prevent this behavior? IE: disable line wrap in the edit search window... etc etc.

Tags (1)
0 Karma

woodcock
Esteemed Legend

Go to Your LoginID Here -> Preferences and turn off the Search auto-format setting.

0 Karma

DalJeanis
Legend

Please specify which edit window you are referring to...

0 Karma

moorvogi
Path Finder

settings -> searches,reports and alerts -> (find report) -> edit -> edit search.

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...