Hi Julio, use Grok.
Cheers, Jochen On Tuesday, 16 August 2016 17:28:21 UTC+2, [email protected] wrote: > > Hi, > > > So it seems the CSV to field converter doesn't work with whitespace > delimiters? > > Sample log: > 2016-08-16 15:14:20 192.168.20.100 POST /Clients - 80 DOMAIN\user > 192.168.30.171 > Mozilla/5.0+(Windows+NT+10.0;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/52.0.2743.116+Safari/537.36 > > 302 0 0 187 > > I've tried both an actual whitespace and \s in the 'Separator character' > field but nothing does it. > > > <http://i.imgur.com/mFQfekZ.png> > > > > Any tips or more doc on the matter so I can achieve this? > I mean I can alternatively use GROK or do it from nxlog at the source but > I'd like this to work as well :) > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/127c039d-1159-44d9-bc2d-1a253675ff50%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
