<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Text  Analytics in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Text-Analytics/m-p/24967#M955</link>
    <description>&lt;P&gt;Hi , &lt;BR /&gt;
 I have a sample data with ~ as a seperator. The format of data is as follows.&lt;/P&gt;

&lt;P&gt;"Request_ID~Submitter~Create_Date~Assigned_To~Last_Modified_By~Modified_Date~Status~Short_Description~tmp_PopUp_GUID~Category~Type~Item~Summary~Pending~Escalated~Closure_Code~MSISDN~Address~First_Name~Priority~Region~Surname~tmp_RegionID~Postal_Code~Date_of_Birth~ID_Number~Password~tmp_GroupSet."&lt;/P&gt;

&lt;P&gt;I am unable to load data to splunk and extract the fields.I tried changing config files props and transforms but no results,I tried with IFX also.&lt;/P&gt;

&lt;P&gt;While loading data to splunk , the following error is generated:&lt;BR /&gt;
"Your entry was not saved. The following error was reported: SyntaxError: JSON.parse: unexpected character"&lt;/P&gt;

&lt;P&gt;Can some one help me in resolving this?&lt;/P&gt;</description>
    <pubDate>Mon, 28 Sep 2020 13:50:12 GMT</pubDate>
    <dc:creator>kavyatim</dc:creator>
    <dc:date>2020-09-28T13:50:12Z</dc:date>
    <item>
      <title>Text  Analytics</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Text-Analytics/m-p/24967#M955</link>
      <description>&lt;P&gt;Hi , &lt;BR /&gt;
 I have a sample data with ~ as a seperator. The format of data is as follows.&lt;/P&gt;

&lt;P&gt;"Request_ID~Submitter~Create_Date~Assigned_To~Last_Modified_By~Modified_Date~Status~Short_Description~tmp_PopUp_GUID~Category~Type~Item~Summary~Pending~Escalated~Closure_Code~MSISDN~Address~First_Name~Priority~Region~Surname~tmp_RegionID~Postal_Code~Date_of_Birth~ID_Number~Password~tmp_GroupSet."&lt;/P&gt;

&lt;P&gt;I am unable to load data to splunk and extract the fields.I tried changing config files props and transforms but no results,I tried with IFX also.&lt;/P&gt;

&lt;P&gt;While loading data to splunk , the following error is generated:&lt;BR /&gt;
"Your entry was not saved. The following error was reported: SyntaxError: JSON.parse: unexpected character"&lt;/P&gt;

&lt;P&gt;Can some one help me in resolving this?&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 13:50:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Text-Analytics/m-p/24967#M955</guid>
      <dc:creator>kavyatim</dc:creator>
      <dc:date>2020-09-28T13:50:12Z</dc:date>
    </item>
    <item>
      <title>Re: Text  Analytics</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Text-Analytics/m-p/24968#M956</link>
      <description>&lt;P&gt;So if I understand you correctly you have regular CSV-formatted data with "~" as a delimiter. You could simply use DELIMS in transforms.conf:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[getmyfields]
DELIMS = "~"
FIELDS = "field1", "field2", "field3", ...
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;(change FIELDS to the fields in your specific dataset - Request_ID, Submitter, Create_Date and so on)&lt;/P&gt;

&lt;P&gt;Then in props.conf:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[yoursourcetype]
REPORT-myfields = getmyfields
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 28 Sep 2020 13:50:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Text-Analytics/m-p/24968#M956</guid>
      <dc:creator>Ayn</dc:creator>
      <dc:date>2020-09-28T13:50:15Z</dc:date>
    </item>
  </channel>
</rss>

