props.conf for different csv files

lmjoin115 — Wed, 28 Apr 2021 17:05:51 GMT

hello ,

I am getting error "Ran out of data while looking for end of header" for csv files parsing ,

On UF , i have

cat props.conf
[csv]
SHOULD_LINEMERGE = False
pulldown_type = true
INDEXED_EXTRACTIONS = csv
CHECK_FOR_HEADER = true
KV_MODE = none
category = Structured

cat inputs.conf
[monitor:///home/lalit/reports]
disabled = false
sourcetype = csv

I have done same props.conf on indexer

Thanks

Lalit

Re: props.conf for different csv files

aasabatini — Thu, 29 Apr 2021 07:25:59 GMT

Hi @lmjoin115

the uf don't need the props conf file, if you need to parse data on collection layer you need a Heavyforwarder.

Anyway in your props is not present a timestamp field also add this line.

HEADER_FIELD_LINE_NUMBER=1

topic props.conf for different csv files in Getting Data In

props.conf for different csv files

Re: props.conf for different csv files