Splunk Search

Spaces removed from query - repeatable

moorvogi
Path Finder

We have a report that runs and when you edit the report in the edit window, it will strip the space if the line wraps to the next line of text but is the same content line... here's a mockup of the query showing line numbers as the Edit search window does.

1 | tstats blah blah.. stuff and more stuff
           even more stuff for line one
2 | rename fields from above etc etc
3 | table fieldname fieldname2 etc

if the above is put into the edit window, the space between "stuff" and "even" gets removed when you save it. Is there a way to prevent this behavior? IE: disable line wrap in the edit search window... etc etc.

Tags (1)
0 Karma

woodcock
Esteemed Legend

Go to Your LoginID Here -> Preferences and turn off the Search auto-format setting.

0 Karma

DalJeanis
Legend

Please specify which edit window you are referring to...

0 Karma

moorvogi
Path Finder

settings -> searches,reports and alerts -> (find report) -> edit -> edit search.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Note: This post outlines a proposed architecture and serves as an interest check. If we secure commitments ...