Uploaded a large dataset (CSV file) and the data is not displaying correctly

[shukan]

Hi

I have upload a CSV file with a lot of data. In one of the column value about more then 1000 characters (with special characters) and 41 words, but all of the data is not displaying. Can you please tell what changes require to upload all data ?

Thank you in advance.

[s2_splunk · Accepted solution]

Take a look at the TRUNCATE setting in props.conf. You can find out whether that is your problem by looking for warning messages in splunkd.log: index=_internal sourcetype=splunkd log_level=WARN component=LineBreakingProcessor
The default is 10000 bytes, so I am not sure that is what you are running up against.

[richgalloway]

What are your current props.conf settings for that sourcetype? What do you mean by "special characters"?