Is it possible to have each piece of software as an event of its own so that I could search for a particular item?
Could some cool regex break this up into searchable data?
Desired output in screenshot below
To split a table-formatted event into multipe events during search time, you can use the multikv command.
Try it like this:
your search | multikv
You should get an event for each line. Each event should have the fields NAME, VERSION, RELEASE etc.
To split a table-formatted event into multipe events during search time, you can use the multikv command.
Try it like this:
your search | multikv
You should get an event for each line. Each event should have the fields NAME, VERSION, RELEASE etc.
Thank you so much