[Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/FXSelectMethodstep, https://community.splunk.com/t5/Splunk-Search/Field-Extraction-Separate-on-Colon/m-p/29751, , The Field Extractor (FX) is a tool that helps you extract fields from your data using delimiters or regular expressions. Delimiters are characters or strings that separate fields in your data. Some of the delimiters that will work with FX are:, Tabs: horizontal spaces that align text in columns., Pipes: vertical bars that often indicate logical OR operations., Spaces: blank characters that separate words or symbols., Therefore, the delimiters A, B, and D will work with FX., , , ]
Submit