Custom fields for CSV Input

[siva_cg]

Hi All,

We have Splunk environment with Indexers clustered and many forwarders managed by Deployment server. We are monitoring some of CSV files of an application using Universal Forwarders. Now, Can I extract Index time fields (calculated fields) using existing column headers without altering the CSV file? If yes, Can you guide me to some documents?

Thanks in advance.

[sudosplunk]

Hello @siva_cg,

Here you go,

http://docs.splunk.com/Documentation/Splunk/7.1.2/Data/Extractfieldsfromfileswithstructureddata#Prop...