Getting Data In

How to remove inner double quotes from json data??

AzmathShaik
Path Finder

Hello

i am trying to remove inner double quotes from json data

here is my sample data:

{"msg": "the message "is printed" here is " having extra double" quote " }

i want to remove the inner double quotes while indexing.
can any one help me in it

Thanks in advance.

0 Karma

gokadroid
Motivator

Try this answer which is exactly similar to what you are asking:

https://answers.splunk.com/answers/477298/how-to-remove-characters-in-my-json-raw-data-so-it.html#an...

Basically using the SEDCMD in your props.conf

0 Karma

AzmathShaik
Path Finder

sorry it didn't worked for me

0 Karma
Get Updates on the Splunk Community!

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...

From GPU to Application: Monitoring Cisco AI Infrastructure with Splunk Observability ...

AI workloads are different. They demand specialized infrastructure—powerful GPUs, enterprise-grade networking, ...

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...