|
Greetings everyone. This is hopefully a pretty simple question - is there a way to "flatten" transactions? After it runs, you end up with a transaction which is a multiline event. What I'd like to do is flatten the lines into a single line of text. For items where there are multiple matching lines, compress them into a single line which is semicolon delimited or something. Any ideas? |
One Answer:
|
You could replace newline characters using The default output in the search app will still wrap lines though, so if you want everything unwrapped on one single line one option would be to use (using _raw directly in table does not work). |
