I found this to work a little more consistently - def fixSplunkJSON( strSplunk ) : strJSON = strSplunk.replace( '}}', '}},' ) strJSON = strJSON.replace( '}}\n', '}}' ) strJSON = strJSON.rstrip( '\n' ) strJSON = strJSON.rstrip( ',' ) strJSON = '[' + strJSON + ']' return strJSON ... View more