Getting Data In

Line breaker is not working

vijreddy30
Loves-to-Learn Everything

Hi team,

Upload the CSV file into Splunk, In CSV file form 47th row to 7th row into single event, written configuration  but single event is not working. please find the below screen shot

 

From 

vijreddy30_0-1718199988332.png

 To  7th Row csv file

vijreddy30_1-1718200131021.png

 

vijreddy30_2-1718200189028.pngvijreddy30_3-1718200249432.pngvijreddy30_4-1718200300889.png

the above screen shot after loaded the splunk , it's not single event for 47th row 7 row.

please help configuration above.

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @vijreddy30 ,

only fo test, load this file using the [Settings > Add Data] feature.

In this way, you can find (and save) the best sourcetype for your events (e.g. I see that you have a wrong timestamp).

Ciao.

Giuseppe

0 Karma

vijreddy30
Loves-to-Learn Everything

Loading the data into splunk using Add tdata settings only. please tell me the exact time need to be configuration.

 

 

vijreddy30_0-1718201943850.png

 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @vijreddy30 ,

as I said, use the Add Data feature to define the correct sourcetype.

Also because, viewing your screenshout, you have a timestamp at 6/12/24 0:37:54 and the Date column at 04/06/2024 and the Time column at 10:48:00.

In Add Data, you can configure and test the timestamp and the line breaking.

Ciao.

Giuseppe

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...