Hello All,
Can someone please help me understand the functionality of AUTO_KV_JSON?
Does it modify the functionality of KV_MODE? If so, under what scenario?
From my experiments it doesn't seem to do anything when traversing the permutations of INDEX_EXTRACTIONS, KV_MODE and AUTO_KV_JSON.
We typically just use the following settings in our sourcetype definitions:
KV_MODE=json
AUTO_KV_JSON=true
Here is the table of results
Appreciate a response.
Thank you.
