Skip to main content
Question

Best way to serialize to a delimiter, without having that delimited in a string value

  • March 11, 2025
  • 2 replies
  • 29 views

Good afternoon Cribl people! I'm trying to find the best way to serialize to a delimiter, while removing the risk of having that delimited in a string value.If we serialized to JSON, string data types are put in quotes, and integers aren't. We're trying to do the same for delimited format (e.g., CSV) - encase strings in quotes, and not integers. We believe this will help Splunk parse, because it's expects a string when it reads a double quote.

2 replies

Jon Rust
Forum|alt.badge.img
  • Employee
  • March 11, 2025

I don't think there's a way to do it with the serialize funct


  • Author
  • Employee
  • March 11, 2025

I think we're stumbling across the solution. It seems like Cribl does put quotes around strings sometimes, just not always. Probably when there are space characters in the string.