I am trying to undesrtand what the option event_format_flags in inputs.conf file can be used for.[mscs_azure_event_hub://<name>]
event_format_flags = <integer> The bitwise flags that determines the format of output events
There seems to no longer be any mention of event_format_flags in the latest app upgrade documentation as of the release of v4.5.1. So maybe this is no longer necessary in the updated app.
Upgrade the Splunk Add-on for Microsoft Cloud Services - Splunk Documentation
Anyone? We are getting json formatted data that is garbeld now via the Microsoft-Cloud-Services app.
It was formatted correctly via the AAD app.
Now there is extra " " around the json and additional \" around each key.