All Apps and Add-ons

blob storage log does not parse

sarit_s
Communicator

Hello

I have a csv file in azure
i've created an input at "Splunk Add-on for Microsoft Cloudservices Storage Blob" app
Also, ive created this in the sourcetype :

sarit_s_0-1711872810744.png

this is the transforms :

sarit_s_1-1711872844647.png

and this is the field extraction :

sarit_s_2-1711872879491.png

but the logs does not parse
it indexed as one line 
Am i missing something ?

Labels (1)
Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The REPORT setting is incorrect.  The "REPORT-" keyword identifies this as a report setting and so must be on the left side ("Name").  The name of the transform stanza goes on the right side ("Value").

---
If this reply helps you, Karma would be appreciated.
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...