I am trying to index a new file and am first configuring the source type in the Data Preview screen, however although the records seem to be recognised ok, at the top of the screen I am getting the message "Failed to decode 1 bytes".
The props.conf entry for this source type will have the following parameters:
DATETIME_CONFIG=CURRENT
NO_BINARY_CHECK=1
SHOULD_LINEMERGE=false
TRUNCATE=0
The file contains no timestamps and I am only interested in indexing the file to be able to search the data (one line per event). I tried removing the lines
DATETIME_CONFIG=CURRENT
TRUNCATE=0
but still got the same message.
Can anyone indicate what may be causing this?
... View more