<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: help on csv truncated in dev platform in Splunk Enterprise</title>
    <link>https://community.splunk.com/t5/Splunk-Enterprise/help-on-csv-truncated-in-dev-platform/m-p/571661#M10415</link>
    <description>&lt;P&gt;Would be easier if you can show us what you're observing in both environment ? There could be some special character that might be breaking the CSV (or commas in the field values) but can't say for sure without looking at your data.&lt;/P&gt;</description>
    <pubDate>Wed, 20 Oct 2021 13:57:30 GMT</pubDate>
    <dc:creator>somesoni2</dc:creator>
    <dc:date>2021-10-20T13:57:30Z</dc:date>
    <item>
      <title>help on csv truncated in dev platform</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/help-on-csv-truncated-in-dev-platform/m-p/571657#M10414</link>
      <description>&lt;P&gt;hi&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I generate a csv automatically bu executing the search below in my prod environment&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;index=tutu 
| stats last(ez) as ez by sam 
| outputlookup ez.csv&lt;/LI-CODE&gt;&lt;P&gt;what is strange is that when I call the csv | inputlookup ez.csv from the prod environment it works fine&lt;/P&gt;&lt;P&gt;I have 2 columns with ez and sam&lt;/P&gt;&lt;P&gt;But when I call it from dev environment the csv is truncated because ez column is empty and in sam column I have the ez field value and the sam field value!&lt;/P&gt;&lt;P&gt;Is anybody has an explanation please?&lt;/P&gt;</description>
      <pubDate>Wed, 20 Oct 2021 13:26:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/help-on-csv-truncated-in-dev-platform/m-p/571657#M10414</guid>
      <dc:creator>jip31</dc:creator>
      <dc:date>2021-10-20T13:26:28Z</dc:date>
    </item>
    <item>
      <title>Re: help on csv truncated in dev platform</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/help-on-csv-truncated-in-dev-platform/m-p/571661#M10415</link>
      <description>&lt;P&gt;Would be easier if you can show us what you're observing in both environment ? There could be some special character that might be breaking the CSV (or commas in the field values) but can't say for sure without looking at your data.&lt;/P&gt;</description>
      <pubDate>Wed, 20 Oct 2021 13:57:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/help-on-csv-truncated-in-dev-platform/m-p/571661#M10415</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2021-10-20T13:57:30Z</dc:date>
    </item>
  </channel>
</rss>

