Good afternoon Cribl people! I'm trying to find the best way to serialize to a delimiter, while removing the risk of having that delimited in a string value.If we serialized to JSON, string data types are put in quotes, and integers aren't. We're trying to do the same for delimited format (e.g., CSV) - encase strings in quotes, and not integers. We believe this will help Splunk parse, because it's expects a string when it reads a double quote.
Page 1 / 1
I don't think there's a way to do it with the serialize funct
I think we're stumbling across the solution. It seems like Cribl does put quotes around strings sometimes, just not always. Probably when there are space characters in the string.
Reply
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.