topic Re: Extracting fields and values using csv in splunk in Getting Data In

Extracting fields and values using csv in splunk

priyaramki16 — Wed, 10 Jun 2020 19:47:44 GMT

Hi....I am relatively new to Splunk...

So i am uploading a csv file as a input to splunk and trying to plot charts....The thing I have the contents of csv file in a specific format...

Example:

so when i upload this csv to splunk it creates a table like this

The problem is the Names are not shown for certain rows (even though the user knows from seeing the csv that first 5 rows belong to Raja and next 5 rows belong to Pragya) and only in some rows Names can be seen..

Is there anything we can do in splunk internally to solve this...Any help would be great!! Thanks!!

Re: Extracting fields and values using csv in splunk

to4kawa — Wed, 10 Jun 2020 07:59:41 GMT

I create CSV and search.
so your CSV is wrong, I guess.

Re: Extracting fields and values using csv in splunk

priyaramki16 — Wed, 10 Jun 2020 08:08:54 GMT

I used to display the content as table using this command in search

table Name, Date, Icecream_purchased, Choco_purchased

Using as table can help in creating Charts

For chart creation:

|chart value(Icecream_purchased),value(Choco_purchased) over Name by Date

Is there a way to get this chart if I use inputlookup?

Re: Extracting fields and values using csv in splunk

to4kawa — Wed, 10 Jun 2020 08:14:02 GMT

| inputlookup purchased.csv | filldown Name | xyseries Date Name Choco_purchased Icecream_purchased

you don't need chart, I guess.

Re: Extracting fields and values using csv in splunk

harsmarvania57 — Wed, 10 Jun 2020 08:15:30 GMT

Hi,

In your CSV file all cell are not filled in "Name" column and due to that you can't see name populated in each row in splunk, you can use below query to achieve this.

| inputlookup your_file.csv | filldown Name

Re: Extracting fields and values using csv in splunk

priyaramki16 — Wed, 10 Jun 2020 08:57:10 GMT

| inputlookup source_file_name.csv

This search does not work for me...It gives me statistics(0) ...
Could there be any reason for this

Re: Extracting fields and values using csv in splunk

to4kawa — Wed, 10 Jun 2020 09:06:45 GMT

check

Lookup table files

Re: Extracting fields and values using csv in splunk

priyaramki16 — Wed, 10 Jun 2020 09:04:32 GMT

| inputlookup source_file_name.csv

This search does not work for me...It gives me statistics(0) ...
Could there be any reason for this

Re: Extracting fields and values using csv in splunk

priyaramki16 — Wed, 10 Jun 2020 09:11:08 GMT

Thank you so much!! Got it