Installation

How do I set ANSI encoding for a specific index?

dennisaraujo
Path Finder

Hello!

I need to use ANSI encoding files, Splunk index configuration files with invalid.
How do I set ANSI encoding for a specific index?

Thanks.

0 Karma
1 Solution

rafamss
Contributor

dennisaraujo
Path Finder

I set CHARSET = AUTO, but it did not work.
How do I change to ANSI encoding, only the index test?

Thanks.

0 Karma

rafamss
Contributor

Hi dennisaraujo,

By default, Splunk index the file using UTF-8. All configuration about index data must be in props.conf file. Some like this:

[sourcetype::testinput]
CHARSET=ISO-8859-7

The configuration for the index only, is not supported for props.conf, only host, source or sourcetype.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...