Splunk Enterprise

Escape quote in standard input?

stefano339
Engager

Hello. I have a input script in python that gets data from db and puts them in stdin in the form field = "value". One field contains a json so I tried to escape quotes:
field = "{\"id\": \"a\"}"
but what I get in the field is "{\" losing the rest.
There is a way to escape quote in this case?
Thanks

Tags (2)
0 Karma
1 Solution

stefano339
Engager

Yes I did but is was non working until I found out to use auto_escaped instead of auto as KV_MODE.
Now it's working fine.
Thanks

View solution in original post

0 Karma

stefano339
Engager

Yes I did but is was non working until I found out to use auto_escaped instead of auto as KV_MODE.
Now it's working fine.
Thanks

0 Karma

richgalloway
SplunkTrust
SplunkTrust

If your problem is resolved, please accept the answer to help future readers.

---
If this reply helps you, Karma would be appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Have you tried field = '{\"id\": \"a\"}'?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Word Search

This challenge was first posted on Slack #puzzles channelThis puzzle is based on a letter grid containing ...

[Puzzles] Solve, Learn, Repeat: Advent of Code - Day 4

Advent of CodeIn order to participate in these challenges, you will need to register with the Advent of Code ...

GA: S3 Promote for Historical Data Ingestion in Splunk Cloud

Ingest Historical S3 Data On-Demand: Announcing the General Availability of S3 Promote We’re excited to share ...