I'm currently working on ingesting data from a large SQL database table. One of the columns is a varchar that contains line breaks. For some reason, dbx will ingest the item on the first line, but will ignore the rest of the data in this column. Can someone please provide assistance on a workaround for this issue?
example
ColumnA
string1;
string2;
string3;
string4;
string5
When the data is pushed to splunk, it is stored as an kv pair that only contains the first string. We need all of the strings to be included in this kv pair.
ColumnA = string1
Please provide feedback if possible. Thanks
↧