Splunk cannot read .log file

[Azwaliyana]

I have health check file with extension .log. When I uploaded it to Splunk, it came out like this.

Azwaliyana_0-1639636531159.png
The real file is like this

Azwaliyana_1-1639636742623.png

Does anyone know what is the problem?

[isoutamo · Accepted solution]

Hi

usually this means that splunk cannot recognise CHARSET correctly. Just add this parameter to your source node's props.conf. Check CHARSET parameter and try those UTF-8 / UTF-xx versions.

r. Ismo