×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
htsvaggar
New Member
Member since: ‎02-25-2015
‎06-05-2020
Community Statistics
Posts 4
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎02-25-2015
Activity Feed
View All

Re: Json format is not getting indexed

by in Getting Data In
‎02-27-2015 01:23 PM
‎02-27-2015 01:23 PM
Thanks, Now I am getting different issue with json. transaction is repeating twice for every record in UI. Is it UI issue or I am doing something wrong. Here is the sample display from the event. If you see Description attribute is repeating twice in the bottom. { "Id":"7097", "ComponentTypeName":"Metcon", "OwnershipLevelName":"Global", "UserName":null, "Name":"Fran", "Description":"21-15-9 \nThrusters, 95# / 65# \nPull-ups", "IsBenchmark":"True", "HasBeenSaved":"True", "IsNewComponentEmailSent":"False", "AllowRxPlus":"False", "Rounds":"0", "Comments":null, "RepScheme":null, "PerformanceResultTypeName":"Time" } Show syntax highlighted Collapse Description = 21-15-9 Thrusters, 95# / 65# Pull-ups Description = 21-15-9 Thrusters, 95# / 65# Pull-ups Id = 7097 Id = 7097 Name = Fran Name = Fran Thanks Sanjeev ... View more

Re: Has anybody indexed json format file

by in Getting Data In
‎02-25-2015 02:10 PM
‎02-25-2015 02:10 PM
Thanks That did not work. At least I should see the different source type in the event search. I am not seeing either. Regards ... View more

Has anybody indexed json format file

by in Getting Data In
‎02-25-2015 12:12 PM
‎02-25-2015 12:12 PM
Hi, Has anybody done parsing JSON file. If you can let me know what are the setting being done in input.conf and props.conf files. Thanks sanjeev ... View more

Json format is not getting indexed

by in Getting Data In
‎02-25-2015 11:45 AM
‎02-25-2015 11:45 AM
Hi, I am trying to analyze the json file for some reason it is not getting indexed. Here is a sample json file [ { "FIELD1":"CNE", "FIELD2":"cleanAndEnrich._130rfmtBR_StdAddrEnrch", "FIELD3":"REC_READ", "FIELD4":"", "FIELD5":"", "FIELD6":"5", "FIELD7":"" }, { "FIELD1":"CNE", "FIELD2":"CNE", "FIELD3":"REC_READ", "FIELD4":"POLICY", "FIELD5":"RA", "FIELD6":"0", "FIELD7":"" } ] Here is my props.conf and input.conf [monitor:///opt/test/data/json_log/*.json] host = localhost source = jsonlog sourcetype = zajsonlog [root@sandbox local]# tail -10 props.conf [source::/opt/test/data/json_log/*.json] sourcetype = zajsonlog [zajsonlog] SHOULD_LINEMERGE = false TIMESTAMP_FIELDS = datetime TIME_FORMAT = %m-%d-%Y %H:%M:%S.%l %z INDEXED_EXTRACTIONS = json KV_MODE = none ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM