What is causing duplicate entries of json data?

Getting Data In

Hello Splunkers,

I am ingesting data from azure eventhub, and after using some SEDCMDs in my props, I am making data into json. However, I see multiple entries of same data.

apart from SEDMDs my props is as below:

pulldown_type = true

KV_MODE=none

Searchhead

pulldown_type = true

INDEXED_EXTRACTIONS=json

KV_MODE=none

Can you please help what mistake i am doing here?

Thanks

Get Updates on the Splunk Community!

Tuning Edge Processor in Hybrid Mode: What Limits Each Data Path

When you run Edge Processor in hybrid mode, alongside a Splunk heavy forwarder on the same host, two questions ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Request for Professional Development: Attending .conf26

Winning Over the Boss: Your Pass to .conf26 conf26 is going to be here before you know it. If don't already ...