search

salspaugh / splparser

Simple parser for Splunk Processing Language (SPL) written in Python.
Other
35 stars 14 forks source link

Subsearch commands #88

Closed richzeng closed 11 years ago

richzeng commented 11 years ago

Append with tests are ready. Working on join and appendcols.

salspaugh commented 11 years ago

This looks good so far. One thing I'm curious about and you should maybe add a test for: what happens if "[" or "]" appears in a subsearch? For example:

... [ search "[" | ... ]