Sure. Below is the sample logger with two keys  "root[60]_level[5]" and "root_string". 2020-10-07 17:50:04,208 - INFO - root[60]_level[5]=value, root_string=value root_string - This key is indexed root[60]_level[5] - This key is not indexed. I am open to try any kind of  key transformations but I want the key to be indexed. Please suggest. ... View more

Thanks for the response. But as I mentioned earlier  splunk is logging as root[60]_level[5]=value [] are not converted to underscores. Do I need to do any property changes for that ? Suppose the conversion is done and my key is replaced with  double underscores like below "root_60__level_5_=value" Does splunk honurs double underscore and still index the key "root_60__level_5_"? ... View more

In props.config Truncate=1000000 Length of string in my log file is 38309 But, in splunk string truncates at length 9967 Appreciate any help. ... View more

I am facing same issue. Can anyone please suggest the solution? ... View more