better use this one https://community.splunk.com/t5/Getting-Data-In/Using-props-transforms-to-assign-sourcetype-and-extract-fields/td-p/97512
... View more
I've opened support case for this and Splunk Support answered that I should add "-Dfile.encoding=UTF-8" to JVM Options in general settings of DB Connect
... View more
After updating Splunk DB Connect from 2.4 to 3.0 events with Russian language display incorrect.
In preview of creating input everything looks fine, but in search there are only "??????".
... View more