Parse Delimiters: Arguments for the $Delim() Function - Documentation for Bmc Defender Siem Correlation Server 5.9

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by a space. This is the default delimiter (hence this flag is included as a delimiter option mainly for completeness).

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by the next comma character, or end of line.

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by the next colon (:) character, or end of line.

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by the next semi-colon character (;), or end of line.

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by the next pipe character (|) or the end of line.

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by the next hyphen character (-) or end of line.

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by the next ampersand character (&) or end of line.

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by the next plus character (+) or end of line.

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by the next hash character (#) or end of line.

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by the next at sign character (@) or end of line.

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by the next percent character (%) or end of line.

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by the punctuation character, where any punctuation character including the preceding ones, can delimit the return value.

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by the next space character followed by a hyphen character (- ). The space dash combination of characters is used extensively in message context to delimit fields such as AAA - BBB - CCC, hence this special type of delimiter might be used frequently when parsing Windows agent (and other) messages.

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by the next double quoted string. The second double quote mark in the string can delimit the value (and the value is returned with the balanced quote marks removed).

This delimiter, used as the first argument of the $delim() function, can delimit the returned parsed value by the start of the next CEF style field, where the CEF field is in the form label=value. The string preceding the next field is returned. If CEF is used, the parse function is quite useful (since CEF is notoriously hard to parse by any sort of program).

This delimiter, used as the first argument of the $delim() function, delimits the returned parsed value by the end of line. This is only useful when the text that is targeted is delimited by the end of line and not some other delimiter.