I have perfect key/value pairs in my log (I am using the Splunk Add-on for Microsoft Azure to get table storage logs). The logs have:
LogTyppe: LogTyppe
MessageDetail: {"test"="this will work", "name"="value", "name1"="value1", "name2"="value2"}
MessageSummary: MessageSummary
NetworkAddress: NetworkAddress
Notice in MessageDetail there is a JSON formatted string... How do I get Splunk to recognize that one of the field values as json format?
↧