I use python script to get json data thouth an API, and i want show them in a table in splunk search.
the python script used print(json) method, and the splunk used "|script ***" command.
but the splunk search result was only a part of json data(before ther first comma).
Why? and what should i do to show all json data in a table?
please help me,thanks.
Ideally splunk likes 100% true JSON which means NO SPACES. So make sure that your script does NOT output pretty
JSON but true
or compact
JSON and Splunk should like it just fine. When Splunk presents it to you in search, it will pretty
it for you then.