Parse Delimiters - Documentation for Bmc Defender Siem Correlation Server 6.1
Delimiterdescriptionparse expressionspaceDelimits the Returned Parsed Value by a spaceThis Is the Default Delimiter (Hence This Flag Is Included as a Delimiter...
Delimits the returned parsed value by a space
This is the default delimiter (hence this flag is included as a delimiter option mainly for completeness).
Delimits the returned parsed value by the next comma character or the end of line
Delimits the returned parsed value by the next colon (:) character or the end of line
Delimits the returned parsed value by the next semi-colon character (;) or the end of line
Delimits the returned parsed value by the next pipe character (|) or the end of line
Delimits the returned parsed value by the next hyphen character (-) or the end of line
The dash is a hyphen character (also referred to as the short dash character) and not a long dash (also referred to as the double dash character).
Delimits the returned parsed value by the next ampersand character (&) or the end of line
Delimits the returned parsed value by the next plus character (+) or the end of line
Delimits the returned parsed value by the next hash character (#) or the end of line
Delimits the returned parsed value by the next at sign character (@) or end of line
Delimits the returned parsed value by the next percent character (%) or the end of line
Delimits the returned parsed value by the punctuation character, where any punctuation character including the preceding ones, can delimit the return value
Delimits the returned parsed value by the next space character followed by a hyphen character (-)
The space-dash combination of characters is used extensively in messages to delimit fields such as AAA - BBB - CCC. This special type of delimiter might be used frequently when parsing Windows agent (and other) messages.
Delimits the returned parsed value by the next double-quoted string
The second double quotation mark in the string can delimit the value, and the value is returned with the balanced quotation marks removed. The balanced quotation mark, or bquote, includes the closing character for the following pairs: "",//,(),[],{},<>.
$delim (bquote, parse-spec)
Delimits the returned parsed value by the start of the next CEF-style field, where the CEF field is in the form label=value
The string preceding the next field is returned. If CEF is used, the parse function is quite useful (because CEF is extremely difficult to parse by any sort of program).
Delimits the returned parsed value by the end of line
This is useful only when the text that is targeted is delimited by the end of line and not some other delimiter.
Alexander Ross has covered the video game industry for a decade, writing deep dives on game design, esports tournaments, VR developments, and gaming culture.
