Was there ever a solution found for this issue? I am facing the same problem where the datatype I am returning from the database is of type JSON and being inputed using DBX. In Splunk, however, the field just shows as "{". Example below:
json_returned_from_db="{"id":1234}"
The value here is being treated as a String and so the first 2 double quotes encompasess the { and that is what is returned in the field in Splunk.
I want it to return the result as a JSON type preferably.
Thanks!
... View more