All Apps and Add-ons

blob storage log does not parse

sarit_s
Communicator

Hello

I have a csv file in azure
i've created an input at "Splunk Add-on for Microsoft Cloudservices Storage Blob" app
Also, ive created this in the sourcetype :

sarit_s_0-1711872810744.png

this is the transforms :

sarit_s_1-1711872844647.png

and this is the field extraction :

sarit_s_2-1711872879491.png

but the logs does not parse
it indexed as one line 
Am i missing something ?

Labels (1)
Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The REPORT setting is incorrect.  The "REPORT-" keyword identifies this as a report setting and so must be on the left side ("Name").  The name of the transform stanza goes on the right side ("Value").

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...