Getting Data In
×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question

Embedded JSON column in excel looses data when imported to Splunk

sarahrdpt
New Member
‎08-23-2018 02:16 PM

I am new to Splunk. I have an excel file that has a column which contains embedded JSON. When I Import the csv, I lose some of the data.

{"CreationTime":"2018-05-12C413:09:34", "Id":"Y97H080-09D", "Action":"FileAccessed"}
{"CreationTime":"2017-03-12C412:10:24", "Id":"D4562T20-09D", "Action":"FileCreated"}
{"CreationTime":"2018-08-12C405:18:01", "Id":"9302T20-09D", "Action":"FileDeleted"}

For example, action column in Splunk after importing the csv will have no data.

Can anyone please help me out?

Thank you.

0 Karma
Reply
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...