What is causing duplicate entries of json data?

Getting Data In

Hello Splunkers,

I am ingesting data from azure eventhub, and after using some SEDCMDs in my props, I am making data into json. However, I see multiple entries of same data.

apart from SEDMDs my props is as below:

pulldown_type = true

KV_MODE=none

Searchhead

pulldown_type = true

INDEXED_EXTRACTIONS=json

KV_MODE=none

Can you please help what mistake i am doing here?

Thanks

Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Request for Professional Development: Attending .conf26

Winning Over the Boss: Your Pass to .conf26 conf26 is going to be here before you know it. If don't already ...

[Puzzles] Solve, Learn, Repeat: Classic British Rock Bands

This puzzle series (first published here) is based on extracting information from statements about well-known ...