Hi,
I've been trying to create an external lookup that returns results that contain non-English characters, and Splunk doesn't seem to be able to decode the output.
All I get is a string that looks like this:
\uxxxx \uxxxx \uxxxx ...
where the x's are numbers and letters.
English text that the lookup returns looks fine (it doesn't need decoding). Is there anything I can do to try to make the text decode properly? I've tried to encode the text with utf-8 instead of unicode, but it still doesn't decode.
What kind of non-english ?
Have you configured the character set encoding?
non-english characters that come from the input itself look fine. the problem lies with characters that come from the output of an external lookup.