@powerschill Might I make a suggestion for the JSON? The enchantments array is not going to be easy to split apart. Splunk SPL isn’t nice for keeping the Item with it’s Level. So, for each enchantment, please output it as
{ "enchantments" : [ "THORNS,1", "SHARPNESS,4" ] }
This will make it much easier to keep the item with its level.
From @alacercogitatus:
https://splunk-usergroups.slack.com/archives/minecraft/p1469620234000412