Getting Data In

I want to publish a formatted .csv via email in splunk

New Member

Hi Team,

I have well formatted data into a .csv, just I have publish the data(.csv) as it is on email in well color format.

What approach shall I use in splunk(like Dataset, lookups or anything)

Aslam Sayyed

Tags (1)
0 Karma


CSVs don't have any "formatting" - that is entirely up to whatever tool you use (eg Excel) to render.

In fact, there is no way to encode "format" in a CSV - it's just a text file (

Therefore, you have about two options:

  • export a PDF of your report/dashboard
  • export a CSV, import into a tool like Excel, and reformat
0 Karma

New Member

Sorry I think, I confused you.
I have a comma separated .csv on my Linux prod server.
My question :
1. How shall I send that comma separated .csv file onto splunk.
2. Post I want to send the .csv data over email(in html format or color format)
So could you please let me know how shall I achieve the above two scenarios in splunk.
Appreciate your response.

0 Karma


There is no such thing as a "formatted" CSV file

You can get a CSV into Splunk in one of a few ways:

  • get the UF to monitor it
  • upload it as a lookup
  • ssh it to the SH as a lookup
  • post it to the HEC with a script
  • one-shot it via the web UI or command line
  • etc etc etc

Once you've got it available to Splunk, you could manipulate it into a panel on a dashboard, and then schedule PDF delivery of that dashboard

But you can't "html format or color format" a CSV

A CSV is a text file

There is no "formatting" in it

0 Karma
Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

New Learning Videos on Topics Most Requested by You! Plus This Month’s New Splunk ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

How I Instrumented a Rust Application Without Knowing Rust

As a technical writer, I often have to edit or create code snippets for Splunk's distributions of ...