Was there ever a solution found for this issue? I am facing the same problem where the datatype I am returning from the database is of type JSON and being inputed using DBX. In Splunk, however, the field just shows as "{". Example below: json_returned_from_db="{"id":1234}" The value here is being treated as a String and so the first 2 double quotes encompasess the { and that is what is returned in the field in Splunk. I want it to return the result as a JSON type preferably. Thanks! ... View more