https://community.splunk.com/t5/Getting-Data-In/How-do-I-create-visualizations-using-JSON-data/m-p/458570#M79248 <P>If you set <CODE>KV_MODE = json</CODE> in props.conf for your sourcetype, all the fields should be available for you to use and dashboard upon.</P> Tue, 09 Jul 2019 22:37:17 GMT woodcock 2019-07-09T22:37:17Z https://community.splunk.com/t5/Getting-Data-In/How-do-I-create-visualizations-using-JSON-data/m-p/458569#M79247 <P>I have some log files which I'm serializing into a JSON object and sending it to a Splunk App dashboard (through HTTP Event Collector). <BR /> The data is displayed on the dashboard as shown below:<BR /> data: { [-] <BR /> b1: FDh<BR /><BR /> b2345: 00 00 00 00 <BR /> eid: 31h<BR /><BR /> msg: 00h<BR /><BR /> serialNo: 1 <BR /> sev: 00h<BR /><BR /> sid: 03h<BR /><BR /> sta: FEh<BR /><BR /> timeStamp: 2019-04-29T12:55:46 <BR /> } <BR /> (I don't have any files that I can upload and perform searching. I'm using code to read some text files and converting them to JSON which is directly sent to the Splunk server)<BR /> Is there a way to create graphs/charts using this data on the dashboard? </P> Tue, 09 Jul 2019 20:14:49 GMT https://community.splunk.com/t5/Getting-Data-In/How-do-I-create-visualizations-using-JSON-data/m-p/458569#M79247 angshul 2019-07-09T20:14:49Z https://community.splunk.com/t5/Getting-Data-In/How-do-I-create-visualizations-using-JSON-data/m-p/458570#M79248 <P>If you set <CODE>KV_MODE = json</CODE> in props.conf for your sourcetype, all the fields should be available for you to use and dashboard upon.</P> Tue, 09 Jul 2019 22:37:17 GMT https://community.splunk.com/t5/Getting-Data-In/How-do-I-create-visualizations-using-JSON-data/m-p/458570#M79248 woodcock 2019-07-09T22:37:17Z