https://community.splunk.com/t5/Getting-Data-In/Strange-data-comes-out-as-field-values-Same-as-the-source-path/m-p/464348#M80085 <P>Strange data found in source type that doesn't match stanza</P> <P>props.conf<BR /> stanza - <CODE>[(?::){0}*_*_*_*]</CODE></P> Wed, 11 Dec 2019 02:43:28 GMT nmnank 2019-12-11T02:43:28Z https://community.splunk.com/t5/Getting-Data-In/Strange-data-comes-out-as-field-values-Same-as-the-source-path/m-p/464346#M80083 <P>I have a strange problem.</P> <P>In the search header, the value of the field created in props.conf is the same as the source path.</P> <P>SH - props.conf <BR /> LOOKUP-center_tag_dest = ldcc_portal_asset IP AS dest OUTPUT group_id AS tag_dest</P> <P>result<BR /> <IMG src="https://community.splunk.com/storage/temp/277753-%E1%84%8F%E1%85%A2%E1%86%B8%E1%84%8E%E1%85%A5.png" alt="alt text" /></P> <P>Normal values ​​also appear but some of these problems are found</P> <P>I want to know what is the cause and how to solve it.</P> Wed, 30 Sep 2020 03:21:13 GMT https://community.splunk.com/t5/Getting-Data-In/Strange-data-comes-out-as-field-values-Same-as-the-source-path/m-p/464346#M80083 nmnank 2020-09-30T03:21:13Z https://community.splunk.com/t5/Getting-Data-In/Strange-data-comes-out-as-field-values-Same-as-the-source-path/m-p/464347#M80084 <P>result <BR /> source::udp:20001|host::61.111.55.40|ips_sniperips_evt</P> Wed, 30 Sep 2020 03:21:16 GMT https://community.splunk.com/t5/Getting-Data-In/Strange-data-comes-out-as-field-values-Same-as-the-source-path/m-p/464347#M80084 nmnank 2020-09-30T03:21:16Z https://community.splunk.com/t5/Getting-Data-In/Strange-data-comes-out-as-field-values-Same-as-the-source-path/m-p/464348#M80085 <P>Strange data found in source type that doesn't match stanza</P> <P>props.conf<BR /> stanza - <CODE>[(?::){0}*_*_*_*]</CODE></P> Wed, 11 Dec 2019 02:43:28 GMT https://community.splunk.com/t5/Getting-Data-In/Strange-data-comes-out-as-field-values-Same-as-the-source-path/m-p/464348#M80085 nmnank 2019-12-11T02:43:28Z