×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
rafiqrehman
New Member
Member since: ‎06-12-2019
‎06-05-2020
Community Statistics
Posts 1
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎06-12-2019
Topics I've Started
No posts to display.
View All

Re: Lines break when indexing JSON data using prop...

by in Getting Data In
‎08-26-2019 06:25 AM
‎08-26-2019 06:25 AM
This works perfect for json data, at least for me: [sourcetype] INDEXED_EXTRACTIONS=json JSON_TRIM_BRACES_IN_ARRAY_NAMES=true CHARSET = AUTO MAX_DIFF_SECS_AGO = 604800 MAX_EVENTS = 10000 NO_BINARY_CHECK = 1 TRUNCATE = 0 ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM