Getting Data In

CSV inconsistent field value

lloydknight
Builder

Hello Splunkers,

So I have this csv file that a certain field contains 10+ numbers.
Please see sample image below:

alt text

Tried changing its format from General to Text in csv before indexing it but I still get this scientific numbers.

Thoughts?

Thanks!

Tags (1)
0 Karma
1 Solution

sduff_splunk
Splunk Employee
Splunk Employee

Can you confirm in the source file that it is using exponential notation? You can check by using the "Show Source" Event Action, or look at the original event.

I expect that the original file will have both decimal and exponential notation, which is causing this.

View solution in original post

0 Karma

sduff_splunk
Splunk Employee
Splunk Employee

Can you confirm in the source file that it is using exponential notation? You can check by using the "Show Source" Event Action, or look at the original event.

I expect that the original file will have both decimal and exponential notation, which is causing this.

0 Karma

lloydknight
Builder

Hello sduff, this was solved by not opening the downloaded csv and indexed it directly on Splunk. Not sure what's the explanation for this though. Thanks.

0 Karma

sduff_splunk
Splunk Employee
Splunk Employee

The problem was likely that your editor (Excel?) converted some of the values in the CSV into scientific notation. As you said, going directly into Splunk didn't have that issue.

lloydknight
Builder

yes most likely my MS Excel converted some of the values into scientific notation.

0 Karma

woodcock
Esteemed Legend

You should click Accept to close this question.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Unlocking Unified Insights: New Gigamon Federated Search App for Splunk

In today’s data-heavy environment, organizations are caught in a data distribution dilemma. As data volumes ...

GA: New Data Management App in Splunk Platform

Streamlining Data Management: Introducing a unified experience in Splunk Managing data at scale shouldn’t feel ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...