Quantcast
Channel: Questions in topic: "props.conf"
Viewing all articles
Browse latest Browse all 1485

INDEXED_EXTRACTIONS = json, fields are extracted as strings, even fields that are numeric only.

$
0
0
I have INDEXED_EXTRACTIONS = json in props.conf. Json data are extracted OK, but ... All fields are extracted as String data type, even fields with numbers only. I can not do any mathematical operations. Is there any global option to enable extracting as number data type? Using 6.6.0 version of Splunk Thanks

Viewing all articles
Browse latest Browse all 1485

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>