From 538676b17a183f077f17c57eea8142c25b913773 Mon Sep 17 00:00:00 2001
From: admingit <jocelyn.pamphile@businessdecision.com>
Date: Wed, 22 Nov 2023 15:19:59 +0100
Subject: [PATCH] Revert "update"

This reverts commit cf0d2422686c02b9c5f127ccf5e12f656f82a8df.
---
 deployment-apps/Splunk_TA_linky/local/props.conf      | 5 ++---
 deployment-apps/Splunk_TA_linky/local/transforms.conf | 6 +++---
 2 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/deployment-apps/Splunk_TA_linky/local/props.conf b/deployment-apps/Splunk_TA_linky/local/props.conf
index 0b695826..bebe8e71 100644
--- a/deployment-apps/Splunk_TA_linky/local/props.conf
+++ b/deployment-apps/Splunk_TA_linky/local/props.conf
@@ -1,5 +1,4 @@
 [_json]
 KV_MODE = json
-SHOULD_LINEMERGE = false
-TRUNCATE = 0
-REPORT-extract_fields = extract_fields
\ No newline at end of file
+TRANSFORMS-extract_json = extract_json_fields
+TRUNCATE = 0
\ No newline at end of file
diff --git a/deployment-apps/Splunk_TA_linky/local/transforms.conf b/deployment-apps/Splunk_TA_linky/local/transforms.conf
index 5b6ad147..27a84fd6 100644
--- a/deployment-apps/Splunk_TA_linky/local/transforms.conf
+++ b/deployment-apps/Splunk_TA_linky/local/transforms.conf
@@ -1,4 +1,4 @@
-[extract_fields]
-REGEX = (?s)(?<=\{).*?(\})
-FORMAT = _json
+[extract_json_fields]
+REGEX = \"(?<field_name>[^\"]+)\":\s?\"(?<field_value>[^\"]+)\"
+FORMAT = $1::$2
 WRITE_META = true
\ No newline at end of file