JSON PS setting is shown at the ingestion general setting menu below,
CMP_JSON_PS | CMP_PS | Description |
---|---|---|
Off | Off | No PS generated (Everything is PS3) |
Off | On | (default behavior) Generic PS generation method for all incoming logs |
On | Off | JSON pattern only and none JSON logs get PS3 |
On | On | JSON logs goes to JSON ps and non-JSON goes to generic PS |
The maximum depth limitation the JSON log clustering method looks into for each JSON log.
Zero(0) is set for no maximum depth limitation.
The default maximum matching depth is set to three(3).