<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Upload csv file with escaped quotes in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Upload-csv-file-with-escaped-quotes/m-p/566867#M100734</link>
    <description>&lt;P&gt;Hello together,&lt;/P&gt;&lt;P&gt;I have a csv file which looks like this:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;"Time";"Comment"&lt;/P&gt;&lt;P&gt;"15:53:21";"Here stands something \"very\" interesting"&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I have nested quotes in the column "Comment". That´s why I have to escape them by using the "\".&amp;nbsp;&lt;/P&gt;&lt;P&gt;This is what I want to have as output:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;"Time";"Comment"&lt;/P&gt;&lt;P&gt;"15:53:21";"Here stands something "very" interesting"&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;What I have tried so far is to use auto_escaped as KV_MODE which can be found in Add Data --&amp;gt; Select Source--&amp;gt;Set Source Type--&amp;gt;Advanced. But without success. The escape character is still there.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I would appreciate any helpful hints.&lt;/P&gt;</description>
    <pubDate>Mon, 13 Sep 2021 14:08:23 GMT</pubDate>
    <dc:creator>SplunkUser</dc:creator>
    <dc:date>2021-09-13T14:08:23Z</dc:date>
    <item>
      <title>Upload csv file with escaped quotes</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Upload-csv-file-with-escaped-quotes/m-p/566867#M100734</link>
      <description>&lt;P&gt;Hello together,&lt;/P&gt;&lt;P&gt;I have a csv file which looks like this:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;"Time";"Comment"&lt;/P&gt;&lt;P&gt;"15:53:21";"Here stands something \"very\" interesting"&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I have nested quotes in the column "Comment". That´s why I have to escape them by using the "\".&amp;nbsp;&lt;/P&gt;&lt;P&gt;This is what I want to have as output:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;"Time";"Comment"&lt;/P&gt;&lt;P&gt;"15:53:21";"Here stands something "very" interesting"&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;What I have tried so far is to use auto_escaped as KV_MODE which can be found in Add Data --&amp;gt; Select Source--&amp;gt;Set Source Type--&amp;gt;Advanced. But without success. The escape character is still there.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I would appreciate any helpful hints.&lt;/P&gt;</description>
      <pubDate>Mon, 13 Sep 2021 14:08:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Upload-csv-file-with-escaped-quotes/m-p/566867#M100734</guid>
      <dc:creator>SplunkUser</dc:creator>
      <dc:date>2021-09-13T14:08:23Z</dc:date>
    </item>
  </channel>
</rss>

