Hello
I have a csv file in azure
i've created an input at "Splunk Add-on for Microsoft Cloudservices Storage Blob" app
Also, ive created this in the sourcetype :
this is the transforms :
and this is the field extraction :
but the logs does not parse
it indexed as one line
Am i missing something ?
The REPORT setting is incorrect. The "REPORT-" keyword identifies this as a report setting and so must be on the left side ("Name"). The name of the transform stanza goes on the right side ("Value").