Getting Data In

auto parse json data failed by source type configuration in splunk8

bigq
New Member

case:

transfer data as json format from splunk 6.x to splunk 8 or splunk8.1,failed,

did not parse the json format success by the following set up:

but i can do work well from splunk6.x to splunk 7, so is this a splunk 8 bug? or does there has some workaround solution?

bigq_0-1603722375078.png

 

Labels (2)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Hello POJO, meet nocode

What's the Challenge? Instrumentation agents are highly advanced bits of software that manipulate bytecode, ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Self-Healing Pipeline Is Now Generally Available: AI-Powered CIM Compliance

Maintaining data integrity across security and analytics pipelines is an ongoing challenge. Data ...