Getting Data In

How to set a source_type for CSV with headers?

Flower
Loves-to-Learn Lots

Hi,

I'm trying to set a source_type for CSV files that contains headers, and the fields are extracted fine.
The problem is that the data is extracted both as fields with the headers and as indexed fields like: field1, field2, etc.


My question is:
Is it possible to extract only the fields with the headers and not the fields field1, field2?

Thanks!

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...