Getting Data In

How to remove double quotes from outputlookup csv file

mvaradarajam
Path Finder

How to remove double quotes from outputlookup csv file

Tags (2)
0 Karma

MuS
Legend

Hi mvaradarajam,

you cannot remove double quotes from output lookup csv file.
Splunk will put them around any values containing any non alphanumeric character. See this answer for more details http://answers.splunk.com/answers/114632/when-does-splunk-add-double-quotation-in-outputcsv.html

Anyhow, why is this a problem to you?
Can't you simply use something like this on the lookup fields:

... | head 1 | eval foo="\"quotes\"" | eval boo=trim(foo, "\"") | table foo boo

cheers, MuS

0 Karma
Get Updates on the Splunk Community!

ATTENTION!! We’re MOVING (not really)

Hey, all! In an effort to keep this Slack workspace secure and also to make our new members' experience easy, ...

Splunk Admins: Build a Smarter Stack with These Must-See .conf25 Sessions

  Whether you're running a complex Splunk deployment or just getting your bearings as a new admin, .conf25 ...

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...