Getting Data In

I have a csv file which contains random data in two rows, and has structured data from 3rd row , How can I blacklist top two rows get data in splunk csv format

nagarjuna559
Explorer

Ex:

a, b, c, d, e, f , g

name, class, year, branch
abc, 1,2016, maths

I want to blacklist a,b,c ,d, e ,f and get fields name, class, year, branch

Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Try HEADER_FIELD_LINE_NUMBER = 3 in props.conf.

---
If this reply helps you, an upvote would be appreciated.
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!