Splunk Search
Highlighted

How to get an external lookup that returns results containing non-english charsets to decode properly?

New Member

Hi,

I've been trying to create an external lookup that returns results that contain non-English characters, and Splunk doesn't seem to be able to decode the output.
All I get is a string that looks like this:

\uxxxx \uxxxx \uxxxx ... 

where the x's are numbers and letters.

English text that the lookup returns looks fine (it doesn't need decoding). Is there anything I can do to try to make the text decode properly? I've tried to encode the text with utf-8 instead of unicode, but it still doesn't decode.

0 Karma
Highlighted

Re: How to get an external lookup that returns results containing non-english charsets to decode properly?

Splunk Employee
Splunk Employee
0 Karma
Highlighted

Re: How to get an external lookup that returns results containing non-english charsets to decode properly?

New Member

non-english characters that come from the input itself look fine. the problem lies with characters that come from the output of an external lookup.

0 Karma
Highlighted

Re: How to get an external lookup that returns results containing non-english charsets to decode properly?

Splunk Employee
Splunk Employee

What kind of non-english ?

0 Karma