The command is very simple. All you have to do is list the fields you want to convert the character code to Shift-JIS.
Usage:
... | ccsjis <field-list>
Example:
| makeresults | eval name="ご挨拶" , message="とても良いお天気ですね" | ccsjis name message
The result of this command will be garbled on the Splunk Web.
Run it just before outputting the search results to a file in the following scene.
- When outputting search results to CSV on the Splunk Web.
- If you use the "outputcsv" command to create a file that needs to be linked to another system.
- If you need to attach the result when sending mail with "sendmail" command or alert action.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.