https://community.splunk.com/t5/Getting-Data-In/mapping-headers-to-data-in-csv/m-p/34547#M6249 <P>I want to map headers to the data in the csv to search the fields as key=value pair, the sample log is shared below. please help</P> <P>,,,Date,Time,Sensor Id a,Reading a,Sensor Id b,Reading b,Sensor Id c,Reading c,Sensor Id d,Reading d<BR /> ,,,01-Jan-12,0:00:00,T001,170.3,T002,168.7,T003,169.7,T004,171.2<BR /> ,,,01-Jan-12,00:30:00,T001,170.1,T002,168.5,T003,169.5,T004,171<BR /> ,,,01-Jan-12,1:00:00,T001,170,T002,168.4,T003,169.4,T004,170.8<BR /> ,,,01-Jan-12,1:30:00,T001,169.6,T002,168.2,T003,169.3,T004,170.5</P> Fri, 15 Feb 2013 21:06:08 GMT thirumalreddyb 2013-02-15T21:06:08Z https://community.splunk.com/t5/Getting-Data-In/mapping-headers-to-data-in-csv/m-p/34547#M6249 <P>I want to map headers to the data in the csv to search the fields as key=value pair, the sample log is shared below. please help</P> <P>,,,Date,Time,Sensor Id a,Reading a,Sensor Id b,Reading b,Sensor Id c,Reading c,Sensor Id d,Reading d<BR /> ,,,01-Jan-12,0:00:00,T001,170.3,T002,168.7,T003,169.7,T004,171.2<BR /> ,,,01-Jan-12,00:30:00,T001,170.1,T002,168.5,T003,169.5,T004,171<BR /> ,,,01-Jan-12,1:00:00,T001,170,T002,168.4,T003,169.4,T004,170.8<BR /> ,,,01-Jan-12,1:30:00,T001,169.6,T002,168.2,T003,169.3,T004,170.5</P> Fri, 15 Feb 2013 21:06:08 GMT https://community.splunk.com/t5/Getting-Data-In/mapping-headers-to-data-in-csv/m-p/34547#M6249 thirumalreddyb 2013-02-15T21:06:08Z https://community.splunk.com/t5/Getting-Data-In/mapping-headers-to-data-in-csv/m-p/34548#M6250 <P>You can do this by configuring header-based field extractions:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/5.0.2/Data/Extractfieldsfromfileheadersatindextime">http://docs.splunk.com/Documentation/Splunk/5.0.2/Data/Extractfieldsfromfileheadersatindextime</A></P> Fri, 15 Feb 2013 21:52:11 GMT https://community.splunk.com/t5/Getting-Data-In/mapping-headers-to-data-in-csv/m-p/34548#M6250 the_wolverine 2013-02-15T21:52:11Z