https://community.splunk.com/t5/Splunk-Search/How-can-I-do-fields-from-text-file/m-p/521805#M147069 <P>I need to get 3 columns: host, port, description from text:<BR />10.224.19.18 | 2222| New server<BR />10.198.18.18 | 2443 | IFT<BR />etc<BR /><BR />I use curl-command and output=text</P> Mon, 28 Sep 2020 14:02:37 GMT Luninho 2020-09-28T14:02:37Z https://community.splunk.com/t5/Splunk-Search/How-can-I-do-fields-from-text-file/m-p/521805#M147069 <P>I need to get 3 columns: host, port, description from text:<BR />10.224.19.18 | 2222| New server<BR />10.198.18.18 | 2443 | IFT<BR />etc<BR /><BR />I use curl-command and output=text</P> Mon, 28 Sep 2020 14:02:37 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-do-fields-from-text-file/m-p/521805#M147069 Luninho 2020-09-28T14:02:37Z https://community.splunk.com/t5/Splunk-Search/How-can-I-do-fields-from-text-file/m-p/521810#M147071 <P>Add a header row, save it somewhere that either a UF, HF or the server itself can read it, and treat it like any other input file, selecting CSV and making the changes to the delimiter as required?</P><P><A href="https://docs.splunk.com/Documentation/Splunk/8.0.6/Data/Monitorfilesanddirectorieswithinputs.conf" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.0.6/Data/Monitorfilesanddirectorieswithinputs.conf</A></P><P>&nbsp;</P> Mon, 28 Sep 2020 14:05:15 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-do-fields-from-text-file/m-p/521810#M147071 Richfez 2020-09-28T14:05:15Z