Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Removing n whitespaces from event at Index time

$
0
0
Hi all, I want to remove the whitespaces from only the account value, and not the whole event at index time. Is this possible? Given the events look like this: {"account": "Account 1", "justification": "TEST 1", "value": "50"} {"account": "Account 1 2", "justification": "TEST 2", "value": "50"} {"account": "Account 1 2 3", "justification": "TEST 3", "value": "50"} {"account": "Account 1 .. n", "justification": "TEST 4", "value": "50"} I want it to look like this: {"account": "Account1", "justification": "TEST 1", "value": "50"} {"account": "Account12", "justification": "TEST 2", "value": "50"} {"account": "Account123", "justification": "TEST 3", "value": "50"} {"account": "Account1..n", "justification": "TEST 4", "value": "50"}

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>