Configuration is recognized but not applied./opt/splunk/etc/apps/jk_cjbeck/local/props.conf SEDCMD-StripHeader = s/^[^{]+//
hey @scelikok ,
In the hf
Hi @jkuppala,
Did you put this config to the indexer or heavy forwarder that data first ingested?
in hf