https://community.splunk.com/t5/Splunk-Search/How-to-build-dynamic-columns-using-a-Splunk-search-for-data-from/m-p/264774#M79513 <P>Our application has CSV log files and the CSV is indexed in Splunk, but our CSV does not have any column headers. How do I build a search to read the below data and create field names myself with a search?</P> <P>Below is our Test Data in the CSV file:<BR /> Tester, test, testing<BR /> coder, code, coding<BR /> manger, lead, leader</P> <P>I wanted to create a table with field1, field2, field3 where the data from each column goes correctly into each field.</P> Thu, 19 May 2016 20:47:36 GMT kotig 2016-05-19T20:47:36Z https://community.splunk.com/t5/Splunk-Search/How-to-build-dynamic-columns-using-a-Splunk-search-for-data-from/m-p/264774#M79513 <P>Our application has CSV log files and the CSV is indexed in Splunk, but our CSV does not have any column headers. How do I build a search to read the below data and create field names myself with a search?</P> <P>Below is our Test Data in the CSV file:<BR /> Tester, test, testing<BR /> coder, code, coding<BR /> manger, lead, leader</P> <P>I wanted to create a table with field1, field2, field3 where the data from each column goes correctly into each field.</P> Thu, 19 May 2016 20:47:36 GMT https://community.splunk.com/t5/Splunk-Search/How-to-build-dynamic-columns-using-a-Splunk-search-for-data-from/m-p/264774#M79513 kotig 2016-05-19T20:47:36Z https://community.splunk.com/t5/Splunk-Search/How-to-build-dynamic-columns-using-a-Splunk-search-for-data-from/m-p/264775#M79514 <P>Like this:</P> <P>props.conf:</P> <PRE><CODE>[YourSourcetypeHere] TRANSFORMS-ThisNameIsArbitraryButShouldBeUnique = commalist </CODE></PRE> <P>transforms.conf:</P> <PRE><CODE>[commalist] DELIMS = "," FIELDS = field1, field2, field3 </CODE></PRE> Sun, 29 May 2016 01:19:51 GMT https://community.splunk.com/t5/Splunk-Search/How-to-build-dynamic-columns-using-a-Splunk-search-for-data-from/m-p/264775#M79514 woodcock 2016-05-29T01:19:51Z