Why do I see strange characters in Splunk events?

[dahlberg]

I'm looking over an XML log and in the Splunk viewer there are events with long strings of the following:

'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'

I can't seem to find this string and/or key combination anywhere within the actual raw log files. Any idea why this might be?

Thanks,
Mike

[aakwah]

Hello,

This usually happens when there are hidden .swp files created while you are opening the files by an editor.

Regards

[ddrillic]

Maybe the following can help - Why are some of the events garbled with "\x00"?