I also have the following on the search head cluster in props:
KV_MODE = none
As I understand it, since I have INDEXEDEXTRACTIONS = json set on the forwarder, it would make sense that I would have double field extractions IF I didn't set KVMODE = none on the search heads. However, since I do have KV_MODE = none set on the search heads, why am I still getting double extractions? Also, there are no props set on the indexers.
I even tried copying and pasting the default _json props into the new test sourcetype and still get double extractions, even though the default _json sourcetype does not give me double extractions. This makes no sense to me.