https://community.splunk.com/t5/Getting-Data-In/csv-files-with-variable-structure-how-to-input/m-p/468862#M80681 <P>Hi,<BR /> There is a task to index csv structured files where the structure depends on one or several fields. For example in one file you may have:</P> <BLOCKQUOTE> <P>Blockquote<BR /> field1,field2,keyfield1,field3,...,fieldN<BR /> field1,field2,keyfield2,anotherfield3,anotherfield4,...,anotherfieldM<BR /> Blockquote</P> </BLOCKQUOTE> <P>Each record set and length can be completely different except first common fields and keyfields, which we know. We also know the headers set for each keyfield.<BR /> Is there a way to help splunk automatically index the files depending on the keyfield value?</P> <P>Thank you!<BR /> Alex</P> Thu, 29 Aug 2019 08:52:52 GMT flyingpiglet 2019-08-29T08:52:52Z https://community.splunk.com/t5/Getting-Data-In/csv-files-with-variable-structure-how-to-input/m-p/468862#M80681 <P>Hi,<BR /> There is a task to index csv structured files where the structure depends on one or several fields. For example in one file you may have:</P> <BLOCKQUOTE> <P>Blockquote<BR /> field1,field2,keyfield1,field3,...,fieldN<BR /> field1,field2,keyfield2,anotherfield3,anotherfield4,...,anotherfieldM<BR /> Blockquote</P> </BLOCKQUOTE> <P>Each record set and length can be completely different except first common fields and keyfields, which we know. We also know the headers set for each keyfield.<BR /> Is there a way to help splunk automatically index the files depending on the keyfield value?</P> <P>Thank you!<BR /> Alex</P> Thu, 29 Aug 2019 08:52:52 GMT https://community.splunk.com/t5/Getting-Data-In/csv-files-with-variable-structure-how-to-input/m-p/468862#M80681 flyingpiglet 2019-08-29T08:52:52Z