https://community.splunk.com/t5/Getting-Data-In/read-json-file-in-the-raw-field/m-p/550507#M91415 <P>Hello,</P><P>I need to read the json data into the Splunk. I use the Webtools |curl for that. However at the moment I do not have access to the data from Splunk, but what I have is the data in the json form in the file.</P><P>In the meantime until I get the proper access to the data per |curl, I would like to start already with writing the SPL processing it and for that I would like to read it from the file.</P><P>How would I do it? How would I read the datafile in json format that I get it in one single field in Splunk, like _raw? From there I could pick it and manipulate further with spath. I do not really want to index the file, I would just like to read it into a single field, that I have the same starting situation as with the curl call.</P><P>Is it possible?</P><P>Kind regards,</P><P>Kamil</P> Wed, 05 May 2021 10:13:05 GMT damucka 2021-05-05T10:13:05Z https://community.splunk.com/t5/Getting-Data-In/read-json-file-in-the-raw-field/m-p/550507#M91415 <P>Hello,</P><P>I need to read the json data into the Splunk. I use the Webtools |curl for that. However at the moment I do not have access to the data from Splunk, but what I have is the data in the json form in the file.</P><P>In the meantime until I get the proper access to the data per |curl, I would like to start already with writing the SPL processing it and for that I would like to read it from the file.</P><P>How would I do it? How would I read the datafile in json format that I get it in one single field in Splunk, like _raw? From there I could pick it and manipulate further with spath. I do not really want to index the file, I would just like to read it into a single field, that I have the same starting situation as with the curl call.</P><P>Is it possible?</P><P>Kind regards,</P><P>Kamil</P> Wed, 05 May 2021 10:13:05 GMT https://community.splunk.com/t5/Getting-Data-In/read-json-file-in-the-raw-field/m-p/550507#M91415 damucka 2021-05-05T10:13:05Z