Getting Data In

How to set a source_type for CSV with headers?

Flower
Loves-to-Learn Lots

Hi,

I'm trying to set a source_type for CSV files that contains headers, and the fields are extracted fine.
The problem is that the data is extracted both as fields with the headers and as indexed fields like: field1, field2, etc.


My question is:
Is it possible to extract only the fields with the headers and not the fields field1, field2?

Thanks!

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Raise Your Skills at the .conf25 Builder Bar: Your Splunk Developer Destination

Calling all Splunk developers, custom SPL builders, dashboarders, and Splunkbase app creators – the Builder ...

Hunt Smarter, Not Harder: Discover New SPL “Recipes” in Our Threat Hunting Webinar

Are you ready to take your threat hunting skills to the next level? As Splunk community members, you know the ...

Splunk ITSI & Correlated Network Visibility

  Now On Demand   Take Your Network Visibility to the Next Level In today’s complex IT environments, ...