All,
Will INDEXED_EXTRACTIONS = JSON perform the extractions on an All-in-One platform?
Here is my props.conf
The sourcetype was executed but none of the fields were extracted.
I can see the fields & values in _raw but they are not listed as fields.
props.conf (no transforms.conf)
Appreciate the help!
Turns out that the app containing my master props.conf had been disabled within an app.conf file. Not sure how, but it was.
Once enabled, the INDEXED_EXTRACTIONS - json worked well on our all in one development platform.
Special thanks to Woodock.
Turns out that the app containing my master props.conf had been disabled within an app.conf file. Not sure how, but it was.
Once enabled, the INDEXED_EXTRACTIONS - json worked well on our all in one development platform.
Special thanks to Woodock.