Getting Data In

GBK convert UTF-8

New Member

i have download my logs, from my server ,which is encode by "GBK" or GB2312' to my desktop in my computer, and getting the logs data in the platform by using the adding-data  function in the splunk web-ui .the version of my splunk enterprise is 8.2.1.   when i setting the sourcetype in the process of adding the data  , i choose the  charset 'gb2312', and then to search the log in splunk, it correctly displayed.     however, when i  use the  inputs and outputs conf in splunk universal forwader to send the logs to the splunk platform,it correctly displayed but  hava some garbled code.   

i have  followed the suggsetion Solved: Can splunk support GBK? - Splunk Community  but it can not solved my problem.  the below is my configuration in my server and UF.








host = 10.31.xx.xx


index = abcd

sourcetype = mysourcetype

disabled = false

Labels (1)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

What’s New in Splunk Cloud Platform 9.1.2308?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2308! Analysts can ...

Index This | Why do they call it hyper text?

November 2023 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

State of Splunk Careers 2023: Career Resilience and the Continued Value of Splunk

For the past three years, Splunk has partnered with Enterprise Strategy Group to conduct a survey that gauges ...