Getting Data In

How to get rid of __mv_* fields in alert.results .csv file?

patilsonali1729
Path Finder

The alert.results csv file has __mv_field name for every field added in the search. Is there is a way to stop these fields from being added in the file? Or is there a way to remove them using python?

Tags (3)
0 Karma

woodcock
Esteemed Legend

Like this:

| inputlookup alert.results | fields - __mv* | outputlookup alert.results
0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...