Thank you @manjunathmeti . But it doesn't function. The result is the same as before. I think your advice helps if splunk doesn't import a whole file, if it is not salted and/or the first character...
See more...
Thank you @manjunathmeti . But it doesn't function. The result is the same as before. I think your advice helps if splunk doesn't import a whole file, if it is not salted and/or the first characters in it doesn't have a difference to another file imported before. Further Investigation: I have exported the items from splunk (csv) and compare the original file with the export. I can't see any muster, which object is imported and which not. A muster could be like the first 22.256 objects were importet, I see, that object 66 to is not imported, 104, 108, 113, and so on not imported. I think there is a limit to import json-objects. But which is it?