Getting Data In

I have a csv file which contains random data in two rows, and has structured data from 3rd row , How can I blacklist top two rows get data in splunk csv format



a, b, c, d, e, f , g

name, class, year, branch
abc, 1,2016, maths

I want to blacklist a,b,c ,d, e ,f and get fields name, class, year, branch

Tags (2)
0 Karma


Try HEADER_FIELD_LINE_NUMBER = 3 in props.conf.

If this reply helps you, an upvote would be appreciated.
0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!