topic Re: How do I set ANSI encoding for a specific index? in Installation

How do I set ANSI encoding for a specific index?

dennisaraujo — Wed, 18 May 2016 14:05:34 GMT

Hello!

I need to use ANSI encoding files, Splunk index configuration files with invalid.
How do I set ANSI encoding for a specific index?

Thanks.

rafamss — Wed, 18 May 2016 14:22:45 GMT

Hi dennisaraujo,

dennisaraujo — Thu, 19 May 2016 13:31:49 GMT

I set CHARSET = AUTO, but it did not work.
How do I change to ANSI encoding, only the index test?

Thanks.

rafamss — Fri, 27 May 2016 16:28:06 GMT

Hi dennisaraujo,

By default, Splunk index the file using UTF-8. All configuration about index data must be in props.conf file. Some like this:

[sourcetype::testinput] CHARSET=ISO-8859-7

The configuration for the index only, is not supported for props.conf, only host, source or sourcetype.