https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191971#M38263 <P>CSVs the way you mean them are treated in a different way than regular log files.<BR /> There are 2 basic kinds:</P> <P>"just CSVs", which are only accessed via "| inputcsv" and "| outputcsv"<BR /> lookup CSVs, which are accessed with commands "| lookup", "| inputlookup" and "| outputlookup"</P> <P>Use the oputputcsv or outputlookup commands to add comment to your CSV in Splunk web</P> Mon, 24 Aug 2015 17:04:04 GMT jensonthottian 2015-08-24T17:04:04Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191970#M38262 <P>Is it possible to add comments to lines in a csv file? I'd like to be able to #comment.</P> <P>For example, csv list of IP ranges.<BR /> src<BR /> 1.1.1.0/24 #comment<BR /> 2.2.2.0/24 #comment</P> Mon, 24 Aug 2015 16:42:41 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191970#M38262 mikesangray 2015-08-24T16:42:41Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191971#M38263 <P>CSVs the way you mean them are treated in a different way than regular log files.<BR /> There are 2 basic kinds:</P> <P>"just CSVs", which are only accessed via "| inputcsv" and "| outputcsv"<BR /> lookup CSVs, which are accessed with commands "| lookup", "| inputlookup" and "| outputlookup"</P> <P>Use the oputputcsv or outputlookup commands to add comment to your CSV in Splunk web</P> Mon, 24 Aug 2015 17:04:04 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191971#M38263 jensonthottian 2015-08-24T17:04:04Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191972#M38264 <P>How is this CSV stored in Splunk?? Lookup table files OR it's indexed in some index??</P> Mon, 24 Aug 2015 17:04:25 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191972#M38264 somesoni2 2015-08-24T17:04:25Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191973#M38265 <P>For now this is just a single lookup file used by "|inputlookup file.csv" stored in /opt/splunk/etc/system/lookups. </P> <P>I'm using the file to exclude results from a search...so "if in lookup file, then don't return in search results, just give me everything else."</P> <P>Soon I will transition it into a lookup table, indexed log file, or maybe even into a database and use db connect, but for now I'm still learning splunk and doing only newbie-style lookups.</P> Mon, 24 Aug 2015 18:38:52 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191973#M38265 mikesangray 2015-08-24T18:38:52Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191974#M38266 <P>Use some thing like this for "exclude results from a search...so "if in lookup file, then don't return in search results, just give me everything else."</P> <P>your base search NOT [|inputlookup file.csv |table coloumnName]</P> <P>This should do it.</P> Mon, 24 Aug 2015 18:56:11 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191974#M38266 jensonthottian 2015-08-24T18:56:11Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191975#M38267 <P>Okay, I've got it working now. Thanks.</P> Tue, 25 Aug 2015 20:36:48 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191975#M38267 mikesangray 2015-08-25T20:36:48Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191976#M38268 <P>Look at the answer here for a solution:<BR /> <A href="https://answers.splunk.com/answers/32704/lookup-tables-and-comments.html">https://answers.splunk.com/answers/32704/lookup-tables-and-comments.html</A></P> <P>Short:<BR /> Add a comment field and do not use that field in any reference.</P> Wed, 31 Jan 2018 19:58:26 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-add-comments-to-lines-in-a-CSV-file/m-p/191976#M38268 tomaslo 2018-01-31T19:58:26Z