> > Sure, and we have extended it locally for our deployment. I think it's fair > to consider, however, whether the defaults are convenient for common query > cases. For anyone ingesting logs into Splunk, the layout is indeed quite > inconvenient. >
I cannot argue with that! ;-) Time to re-think the default output format? Cheers, D. -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
