https://community.splunk.com/t5/Getting-Data-In/Fields-are-missing-from-some-of-my-records-after-importing-a-CSV/m-p/341605#M62949 <P>hi ianthebrave,<BR /> check the quality of your csv, sometimes I found in so many fields some construction error.<BR /> Try to open it in Excel to examine the row with the missed fields, maybe there's less commas then the others or it's too long.<BR /> If you cannot open it, open with an editor and take only few rows, included the ones with missed fields.<BR /> Bye.<BR /> Giuseppe</P> Mon, 18 Sep 2017 16:58:23 GMT gcusello 2017-09-18T16:58:23Z https://community.splunk.com/t5/Getting-Data-In/Fields-are-missing-from-some-of-my-records-after-importing-a-CSV/m-p/341604#M62948 <P>Hi!</P> <P>I imported a CSV file with 97 fields and after doing some searches, some fields are missing for some records. I have this so-called 'close_notes' field and it's present to some of the records while there are a few records where it does not exist. </P> <P>Thank you. </P> Mon, 18 Sep 2017 16:10:32 GMT https://community.splunk.com/t5/Getting-Data-In/Fields-are-missing-from-some-of-my-records-after-importing-a-CSV/m-p/341604#M62948 ianthebrave 2017-09-18T16:10:32Z https://community.splunk.com/t5/Getting-Data-In/Fields-are-missing-from-some-of-my-records-after-importing-a-CSV/m-p/341605#M62949 <P>hi ianthebrave,<BR /> check the quality of your csv, sometimes I found in so many fields some construction error.<BR /> Try to open it in Excel to examine the row with the missed fields, maybe there's less commas then the others or it's too long.<BR /> If you cannot open it, open with an editor and take only few rows, included the ones with missed fields.<BR /> Bye.<BR /> Giuseppe</P> Mon, 18 Sep 2017 16:58:23 GMT https://community.splunk.com/t5/Getting-Data-In/Fields-are-missing-from-some-of-my-records-after-importing-a-CSV/m-p/341605#M62949 gcusello 2017-09-18T16:58:23Z https://community.splunk.com/t5/Getting-Data-In/Fields-are-missing-from-some-of-my-records-after-importing-a-CSV/m-p/341606#M62950 <P>I second Giuseppe, look closely at your CSV and splunk events, your events will be separated by a , in the splunk events, it is possible that the data input field from your CSV is having some issues. There is no way that once uploaded, the splunk index misses some while accepting some close_notes field values. Have you checked if the fields in CSV BEFORE this field in your CSV is not blank / empty for some rows in the CSV?</P> Mon, 18 Sep 2017 18:05:23 GMT https://community.splunk.com/t5/Getting-Data-In/Fields-are-missing-from-some-of-my-records-after-importing-a-CSV/m-p/341606#M62950 Sukisen1981 2017-09-18T18:05:23Z https://community.splunk.com/t5/Getting-Data-In/Fields-are-missing-from-some-of-my-records-after-importing-a-CSV/m-p/341607#M62951 <P>Hey @ianthebrave, if cusello answered your question please remember to accept the answer to both close this question and to award karma points. Happy splunking! <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Mon, 18 Sep 2017 18:39:28 GMT https://community.splunk.com/t5/Getting-Data-In/Fields-are-missing-from-some-of-my-records-after-importing-a-CSV/m-p/341607#M62951 lfedak_splunk 2017-09-18T18:39:28Z https://community.splunk.com/t5/Getting-Data-In/Fields-are-missing-from-some-of-my-records-after-importing-a-CSV/m-p/341608#M62952 <P>If this answer satisfies your question, please accept or upvote it.<BR /> Bye.<BR /> Giuseppe</P> Wed, 20 Sep 2017 11:15:01 GMT https://community.splunk.com/t5/Getting-Data-In/Fields-are-missing-from-some-of-my-records-after-importing-a-CSV/m-p/341608#M62952 gcusello 2017-09-20T11:15:01Z