topic Splunk cannot read .log file in Splunk Search

Splunk cannot read .log file

Azwaliyana — Thu, 16 Dec 2021 06:39:41 GMT

I have health check file with extension .log. When I uploaded it to Splunk, it came out like this.

The real file is like this

Does anyone know what is the problem?

Re: Splunk cannot read .log file

isoutamo — Thu, 16 Dec 2021 08:54:11 GMT

usually this means that splunk cannot recognise CHARSET correctly. Just add this parameter to your source node's props.conf. Check CHARSET parameter and try those UTF-8 / UTF-xx versions.

r. Ismo