Hi,
So it seems the CSV to field converter doesn't work with whitespace delimiters? Sample log: 2016-08-16 15:14:20 192.168.20.100 POST /Clients - 80 DOMAIN\user 192.168.30.171 Mozilla/5.0+(Windows+NT+10.0;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/52.0.2743.116+Safari/537.36 302 0 0 187 I've tried both an actual whitespace and \s in the 'Separator character' field but nothing does it. <http://i.imgur.com/mFQfekZ.png> Any tips or more doc on the matter so I can achieve this? I mean I can alternatively use GROK or do it from nxlog at the source but I'd like this to work as well :) -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/d51e02f3-a88b-4d03-9759-9cf71b138b7c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.