Hello there..
Trying to parse cameronfix logs and the fields are separated by " , " (note the extra space) - and the fields are separated using space. When I try to separate them using extract pairdelim=" " kvdelim="=", I lose the contents of tag 58 (which contains free form text, with spaces and comma in it). And if I use "," for pairdelim, I dont see the contents after "," in it. Ideas?
↧