Character Converter SJIS Search Command (ccsjis)
Admins: Please read about Splunk Enterprise 8.0 and the Python 2.7 end-of-life changes and impact on apps and upgradeshere.
Overview
Details
The files Splunk can output are limited to "UTF-8", but many Japanese should want to output them in "Shift-JIS".
The custom command provided by this app converts the character code of any field value to "Shift-JIS".
The result looks garbled on the Splunk Web.
However, try exporting it to CSV.
Or, attach a CSV to your email with an alert action.
Your Excel will be able to open attachments without any garbled text.
The custom command provided by this app converts the character code of any field value to "Shift-JIS".
The result looks garbled on the Splunk Web.
However, try exporting it to CSV.
Or, attach a CSV to your email with an alert action.
Your Excel will be able to open attachments without any garbled text.
How to use
The command is very simple. All you have to do is list the fields you want to convert the character code to Shift-JIS.
Usage:
... | ccsjis <field-list>
Example:
| makeresults | eval name="ご挨拶" , message="とても良いお天気ですね" | ccsjis name message
The result of this command will be garbled on the Splunk Web.
Run it just before outputting the search results to a file in the following scene.
- When outputting search results to CSV on the Splunk Web.
- If you use the "outputcsv" command to create a file that needs to be linked to another system.
- If you need to attach the result when sending mail with "sendmail" command or alert action.
Release Notes
Version 1.0.0
May 13, 2020