1

More than 3 years have passed since last update.

@toshikawa(川俣利久)

Splunk 改行を削除する

Splunk

Last updated at 2020-06-18Posted at 2020-06-18

小ネタ

https://splunk-usergroups.slack.com/archives/CD8B6F65Q/p1592463035161900?thread_ts=1592462670.161800&cid=CD8B6F65Q
Slackで見つけたけど、消えてしまうかもしれないので

delete_return.spl

| makeresults 
| eval field="this 
has 
linebreaks " 
| rex field=field mode=sed "s/(?s-m)[\r\n]//g"

(?s-m)がすごい

1

Register as a new user and use Qiita more conveniently

You get articles that match your needs
You can efficiently read back useful information
You can use dark theme

What you can do with signing up

1