topic Re: CSV inconsistent field value in Getting Data In

CSV inconsistent field value

lloydknight — Tue, 09 May 2017 08:32:21 GMT

Hello Splunkers,

So I have this csv file that a certain field contains 10+ numbers.
Please see sample image below:

Tried changing its format from General to Text in csv before indexing it but I still get this scientific numbers.

Thoughts?

Thanks!

Re: CSV inconsistent field value

sduff_splunk — Tue, 09 May 2017 08:57:03 GMT

Can you confirm in the source file that it is using exponential notation? You can check by using the "Show Source" Event Action, or look at the original event.

I expect that the original file will have both decimal and exponential notation, which is causing this.

Re: CSV inconsistent field value

lloydknight — Tue, 09 May 2017 10:27:14 GMT

Hello sduff, this was solved by not opening the downloaded csv and indexed it directly on Splunk. Not sure what's the explanation for this though. Thanks.

Re: CSV inconsistent field value

sduff_splunk — Tue, 09 May 2017 10:50:04 GMT

The problem was likely that your editor (Excel?) converted some of the values in the CSV into scientific notation. As you said, going directly into Splunk didn't have that issue.

Re: CSV inconsistent field value

lloydknight — Tue, 09 May 2017 12:02:58 GMT

yes most likely my MS Excel converted some of the values into scientific notation.

Re: CSV inconsistent field value

woodcock — Fri, 12 May 2017 05:38:08 GMT

You should click Accept to close this question.