Extracting fields and values using csv in splunk

[priyaramki16]

Hi....I am relatively new to Splunk...

So i am uploading a csv file as a input to splunk and trying to plot charts....The thing I have the contents of csv file in a specific format...

Example:

so when i upload this csv to splunk it creates a table like this

The problem is the Names are not shown for certain rows (even though the user knows from seeing the csv that first 5 rows belong to Raja and next 5 rows belong to Pragya) and only in some rows Names can be seen..

Is there anything we can do in splunk internally to solve this...Any help would be great!! Thanks!!

[harsmarvania57]

Hi,

In your CSV file all cell are not filled in "Name" column and due to that you can't see name populated in each row in splunk, you can use below query to achieve this.

| inputlookup your_file.csv | filldown Name

[priyaramki16]

| inputlookup source_file_name.csv 

This search does not work for me...It gives me statistics(0) ...
Could there be any reason for this

[to4kawa · Accepted solution]

check 

Lookup table files

Settings » Lookups » Lookup table files

For me, I create lookups folder in my apps ( /etc/apps/{myapps}/lookups/)
 and create lookup csv

[priyaramki16]

Thank you so much!! Got it

[to4kawa]

I create CSV and search.
so your CSV is wrong, I guess.

[priyaramki16]

I used to display the content as table using this command in search

table Name, Date, Icecream_purchased, Choco_purchased

Using as table can help in creating Charts

For chart creation:

|chart value(Icecream_purchased),value(Choco_purchased) over Name by Date

Is there a way to get this chart if I use inputlookup?

[to4kawa]

| inputlookup purchased.csv
| filldown Name
| xyseries Date Name Choco_purchased Icecream_purchased

you don't need chart, I guess.

[priyaramki16]

| inputlookup source_file_name.csv 

This search does not work for me...It gives me statistics(0) ...
Could there be any reason for this