I have a space delimited field that may contain quoted values that also include spaces. For example:
Value1 Value2 Value3 Value4 "Value with a space 5" Value6
I think I need to use makemv, however this just nets me a exactly what you would expect:
| makeresults
| eval temp="Value1 Value2 Value3 Value4 \"Value with a space 5\" Value6"
| makemv temp
| fields - _time
Value1
Value2
Value3
Value4
"Value
with
a
space
5"
Value6
This leads me to think that I need a regex to parse it correctly, however I am no regex master. Anybody have any ideas?
Thanks!
... View more