When Okta Identity Cloud Add-on for Splunk saves log data in okta into Splunk, Japanese letters are converted into Unicode-escaped state and not unescaped. example: Letters " 田中 " in original log are saved in splunk as converted letters, that is, "\u7530\u4e2d". Therefore, we cannot reach logs we would like to see by searching with Japanese letters. example: I expect the statement below to search logs including " 田中 ", but actually nothing are found: index="okta_logs" 田中 To fix this, I think you need to modify the source code of Okta Identity Cloud add-on. I ask Okta Identity Cloud Add-on for Splunk to have a function to Unicode-unescape multi-byte letters.
... View more