topic Re: OUTPUTCSV -- No Quotes Please in Reporting

OUTPUTCSV -- No Quotes Please

vragosta — Thu, 13 Jun 2013 16:19:06 GMT

OUTPUTCSV is currently appending search results surrounded in quotes, like "1.1.1.1."

Is it possible for OUTPUTCSV to NOT surround the output in quotes?

Thanks!

jeffreygaraygay — Tue, 15 Oct 2013 21:21:33 GMT

Hello, were you able to get your issue with outputcsv having csv output in quotes resolved?

Thanks,
Jeff

MuS — Fri, 31 Oct 2014 06:40:59 GMT

Hi vragosta,

no, this is probably done to handle any non-alphanumeric character correct. See this answer http://answers.splunk.com/answers/114632/when-does-splunk-add-double-quotation-in-outputcsv.html for more details.

cheers, Mus

MuS — Fri, 31 Oct 2014 06:50:49 GMT

or use a simple trim after the lookup?

... | head 1 | eval foo="\"quotes\"" | eval boo=trim(foo, "\"") | table foo boo