Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
Intrust Forwarding to Splunk contains "\" characters causing Splunk to slow down
설명
Intrust Forwarding is sending events to Splunk that contains "\" characters causing Splunk to slow down
원인
This is done by design, the "\" character is a breakout character that tells Splunk to interpret the next character literally, instead of parsing it normally.
해결 방안
This is done to signal to Splunk to use the backslash character ( \ ) to ignore characters that have special meaning in a search, such as quotation marks, pipes, and the backslash character itself. For more reading on these special characters, please visit the links below: