splparser icon indicating copy to clipboard operation
splparser copied to clipboard
verified publisher icon salspaugh

multikv command can have no fields; we should omit new line (\n)

Open keroro824 opened this issue 11 years ago • 1 comments

eg. search set_sos_index host="SPLUNK1.EDM.LOCAL" sourcetype="lsof"\n | head 1\n | multikv \n | get_splunk_process_type_lsof

keroro824 avatar Apr 15 '14 06:04 keroro824

This is a weird one -- I thought the newline should be ignored already. Perhaps it is an escaped escape.

salspaugh avatar Apr 15 '14 18:04 salspaugh