I am new to Splunk. I have an excel file that has a column which contains embedded JSON. When I Import the csv, I lose some of the data.
{"CreationTime":"2018-05-12C413:09:34", "Id":"Y97H080-09D", "Action":"FileAccessed"}
{"CreationTime":"2017-03-12C412:10:24", "Id":"D4562T20-09D", "Action":"FileCreated"}
{"CreationTime":"2018-08-12C405:18:01", "Id":"9302T20-09D", "Action":"FileDeleted"}
For example, action column in Splunk after importing the csv will have no data.
Can anyone please help me out?
Thank you.
↧