Getting Data In

Eventgen - Splunk adding additional double quotes when I export the data as csv causing issues used as sample file?

vksplunk1
Explorer

Hi ,

 

 Splunk adding additional double quotes when I export the data as csv  . When I use the exported file as eventgen sample file, it causing parsing  issues used when insert events using the sample file.

 

Any suggestions to this issue

Labels (4)
0 Karma

vksplunk1
Explorer

Here is part of the 1st event in the exported file:

testindex,"/opt/splunk/var/log/cdm/events/events.log","testindex:testsourcetype","1665554739.952,root_host=""test.server.domain.com"",comp_id=""1234444"",check_checklist_name=""test name"",check_disa_cki_id="""",......

0 Karma

somesoni2
Revered Legend

Could you please provide some examples of data in Splunk that you're exporting that is having issues?

0 Karma

vksplunk1
Explorer

Here is part of the 1st event in the exported file:

testindex,"/opt/splunk/var/log/cdm/events/events.log","testindex:testsourcetype","1665554739.952,root_host=""test.server.domain.com"",comp_id=""1234444"",check_checklist_name=""test name"",check_disa_cki_id="""",......

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...