https://community.splunk.com/t5/Getting-Data-In/How-to-on-board-comma-separated-csv-data-with-pipes-around-each/m-p/533899#M89646 <P>Hi<BR /><BR />Looking for the advice how to on-board the csv file with comma separated values but each field has pipes around it :&nbsp; &nbsp;|field1|,|field2|,...,|fieldn|<BR /><BR />Example:<BR /><BR />Header:<BR />ACTIVITY_LOG_Time,INGRESS_EGRESS_IND,DEST_FMLY_CD,DU_ID,CHANNEL,SBMTR_ID,PRPTY_VALUE_TX,BUSINESS_LINE,TECH_FNCTN_ID,ACTVY_STAT_ID,ACTVY_STAT_DS,ACTVY_SCSFL_IN,SMF_ID,DU_TRKNG_NB,PARTY_ACCT_ID,GROUP_USER,TOPIC_3_VALUE_TX,DU_MQMD_TX<BR /><BR />Sample Event:<BR />|2020-12-21-02.42.14.242001|,|Ingress|,|ABC|,|ZP00119842239341|,|MQ|,|G0000246|,NULL,|TRA|,|TRAM|,1,|MQ Message Queued|,|Y|,|001|,|ZP00119842239341|,||,|G0000246|,||,|Â&nbsp;(?åë&amp;?áèä&amp;è???&lt;9d&gt;³ú¬^]P?|<BR /><BR /><BR />Thank you in advance</P> Wed, 23 Dec 2020 01:00:21 GMT mlevsh 2020-12-23T01:00:21Z https://community.splunk.com/t5/Getting-Data-In/How-to-on-board-comma-separated-csv-data-with-pipes-around-each/m-p/533899#M89646 <P>Hi<BR /><BR />Looking for the advice how to on-board the csv file with comma separated values but each field has pipes around it :&nbsp; &nbsp;|field1|,|field2|,...,|fieldn|<BR /><BR />Example:<BR /><BR />Header:<BR />ACTIVITY_LOG_Time,INGRESS_EGRESS_IND,DEST_FMLY_CD,DU_ID,CHANNEL,SBMTR_ID,PRPTY_VALUE_TX,BUSINESS_LINE,TECH_FNCTN_ID,ACTVY_STAT_ID,ACTVY_STAT_DS,ACTVY_SCSFL_IN,SMF_ID,DU_TRKNG_NB,PARTY_ACCT_ID,GROUP_USER,TOPIC_3_VALUE_TX,DU_MQMD_TX<BR /><BR />Sample Event:<BR />|2020-12-21-02.42.14.242001|,|Ingress|,|ABC|,|ZP00119842239341|,|MQ|,|G0000246|,NULL,|TRA|,|TRAM|,1,|MQ Message Queued|,|Y|,|001|,|ZP00119842239341|,||,|G0000246|,||,|Â&nbsp;(?åë&amp;?áèä&amp;è???&lt;9d&gt;³ú¬^]P?|<BR /><BR /><BR />Thank you in advance</P> Wed, 23 Dec 2020 01:00:21 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-on-board-comma-separated-csv-data-with-pipes-around-each/m-p/533899#M89646 mlevsh 2020-12-23T01:00:21Z https://community.splunk.com/t5/Getting-Data-In/How-to-on-board-comma-separated-csv-data-with-pipes-around-each/m-p/533957#M89655 <P>Try these settings.</P><LI-CODE lang="markup">[mysourcetype] INDEXED_EXTRACTIONS = CSV FIELD_QUOTE = | TIMESTAMP_FIELDS = ACTIVITY_LOG_Time TIME_FORMAT = %Y-%m-%d %H:%M:%S.%6N</LI-CODE> Wed, 23 Dec 2020 14:20:51 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-on-board-comma-separated-csv-data-with-pipes-around-each/m-p/533957#M89655 richgalloway 2020-12-23T14:20:51Z