Getting Data In

Embedded JSON column in excel looses data when imported to Splunk

sarahrdpt
New Member

I am new to Splunk. I have an excel file that has a column which contains embedded JSON. When I Import the csv, I lose some of the data.

{"CreationTime":"2018-05-12C413:09:34", "Id":"Y97H080-09D", "Action":"FileAccessed"}
{"CreationTime":"2017-03-12C412:10:24", "Id":"D4562T20-09D", "Action":"FileCreated"}
{"CreationTime":"2018-08-12C405:18:01", "Id":"9302T20-09D", "Action":"FileDeleted"}

For example, action column in Splunk after importing the csv will have no data.

Can anyone please help me out?

Thank you.

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...