I am troubleshooting an issue with an app and the searchoperatorKV error I am receiving is:
Invalid key-value parser, ignoring it, transform_name='my_transform'.
When investigating the transforms.conf file, the transform in question looks like this:
# transforms.conf
[my_transform]
MV_ADD = True
My question is are the boolean values true and false case sensitive within the .conf files?
Boolean values can be set to True
or true
. Check if any invalid attribute for stanza my_transform in transforms.conf using btool commands.
$SPLUNK_HOME/bin/splunk btool check
$SPLUNK_HOME/bin/splunk btool transforms list --debug
Boolean values can be set to True
or true
. Check if any invalid attribute for stanza my_transform in transforms.conf using btool commands.
$SPLUNK_HOME/bin/splunk btool check
$SPLUNK_HOME/bin/splunk btool transforms list --debug