<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Custom fields for CSV Input in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Custom-fields-for-CSV-Input/m-p/457247#M79010</link>
    <description>&lt;P&gt;Hi All,&lt;/P&gt;

&lt;P&gt;We have Splunk environment with Indexers clustered and many forwarders managed by Deployment server. We are monitoring some of CSV files of an application using Universal Forwarders. Now, Can I extract Index time fields (calculated fields) using existing column headers without altering the CSV file? If yes, Can you guide me to some documents?&lt;/P&gt;

&lt;P&gt;Thanks in advance.&lt;/P&gt;</description>
    <pubDate>Wed, 25 Jul 2018 12:07:14 GMT</pubDate>
    <dc:creator>siva_cg</dc:creator>
    <dc:date>2018-07-25T12:07:14Z</dc:date>
    <item>
      <title>Custom fields for CSV Input</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Custom-fields-for-CSV-Input/m-p/457247#M79010</link>
      <description>&lt;P&gt;Hi All,&lt;/P&gt;

&lt;P&gt;We have Splunk environment with Indexers clustered and many forwarders managed by Deployment server. We are monitoring some of CSV files of an application using Universal Forwarders. Now, Can I extract Index time fields (calculated fields) using existing column headers without altering the CSV file? If yes, Can you guide me to some documents?&lt;/P&gt;

&lt;P&gt;Thanks in advance.&lt;/P&gt;</description>
      <pubDate>Wed, 25 Jul 2018 12:07:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Custom-fields-for-CSV-Input/m-p/457247#M79010</guid>
      <dc:creator>siva_cg</dc:creator>
      <dc:date>2018-07-25T12:07:14Z</dc:date>
    </item>
    <item>
      <title>Re: Custom fields for CSV Input</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Custom-fields-for-CSV-Input/m-p/457248#M79011</link>
      <description>&lt;P&gt;Hello @siva_cg,&lt;/P&gt;

&lt;P&gt;Here you go,&lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/7.1.2/Data/Extractfieldsfromfileswithstructureddata#Props.conf_attributes_for_structured_data"&gt;http://docs.splunk.com/Documentation/Splunk/7.1.2/Data/Extractfieldsfromfileswithstructureddata#Props.conf_attributes_for_structured_data&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 25 Jul 2018 12:59:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Custom-fields-for-CSV-Input/m-p/457248#M79011</guid>
      <dc:creator>sudosplunk</dc:creator>
      <dc:date>2018-07-25T12:59:48Z</dc:date>
    </item>
  </channel>
</rss>

