When Okta Identity Cloud Add-on for Splunk saves log data in okta into Splunk, Japanese letters are converted into Unicode-escaped state and not unescaped. example: Letters "田中" in original log are saved in splunk as converted letters, that is, "\u7530\u4e2d". Therefore, we cannot reach logs we would like to see by searching with Japanese letters. example: I expect the statement below to search logs including "田中", but actually nothing are found: index="okta_logs" 田中 To fix this, I think you need to modify the source code of Okta Identity Cloud add-on. I ask Okta Identity Cloud Add-on for Splunk to have a function to Unicode-unescape multi-byte letters.
... View more