Splunk Search

Splunk cannot read .log file

Azwaliyana
Path Finder

I have health check file with extension .log. When I uploaded it to Splunk, it came out like this.

Azwaliyana_0-1639636531159.png
The real file is like this

Azwaliyana_1-1639636742623.png

Does anyone know what is the problem?

 

 

Labels (1)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

usually this means that splunk cannot recognise CHARSET correctly. Just add this parameter to your source node's props.conf. Check CHARSET parameter and try those UTF-8 / UTF-xx versions.

r. Ismo

View solution in original post

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

usually this means that splunk cannot recognise CHARSET correctly. Just add this parameter to your source node's props.conf. Check CHARSET parameter and try those UTF-8 / UTF-xx versions.

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2023 Splunk Career Impact Report

We’ve been shouting it from the rooftops! The findings from the 2023 Splunk Career Impact Report showing that ...

Splunk Lantern | Getting Started with Edge Processor, Machine Learning Toolkit ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...