Getting Data In

I want to publish a formatted .csv via email in splunk

New Member

Hi Team,

I have well formatted data into a .csv, just I have publish the data(.csv) as it is on email in well color format.

What approach shall I use in splunk(like Dataset, lookups or anything)

Aslam Sayyed

Tags (1)
0 Karma


CSVs don't have any "formatting" - that is entirely up to whatever tool you use (eg Excel) to render.

In fact, there is no way to encode "format" in a CSV - it's just a text file (

Therefore, you have about two options:

  • export a PDF of your report/dashboard
  • export a CSV, import into a tool like Excel, and reformat
0 Karma

New Member

Sorry I think, I confused you.
I have a comma separated .csv on my Linux prod server.
My question :
1. How shall I send that comma separated .csv file onto splunk.
2. Post I want to send the .csv data over email(in html format or color format)
So could you please let me know how shall I achieve the above two scenarios in splunk.
Appreciate your response.

0 Karma


There is no such thing as a "formatted" CSV file

You can get a CSV into Splunk in one of a few ways:

  • get the UF to monitor it
  • upload it as a lookup
  • ssh it to the SH as a lookup
  • post it to the HEC with a script
  • one-shot it via the web UI or command line
  • etc etc etc

Once you've got it available to Splunk, you could manipulate it into a panel on a dashboard, and then schedule PDF delivery of that dashboard

But you can't "html format or color format" a CSV

A CSV is a text file

There is no "formatting" in it

0 Karma
Get Updates on the Splunk Community!

Splunk Community Platform Survey

Hey Splunk Community, Starting today, the community platform may prompt you to participate in a survey. The ...

Observability Highlights | November 2022 Newsletter

 November 2022Observability CloudEnd Of Support Extension for SignalFx Smart AgentSplunk is extending the End ...

Avoid Certificate Expiry Issues in Splunk Enterprise with Certificate Assist

This blog post is part 2 of 4 of a series on Splunk Assist. Click the links below to see the other ...