Hello everyone,
I am trying to create an add-on REST API with Splunk to download a .csv file from a confluence page and push the information to Splunk.
I would like to have a table with the content of the .csv file, but so far I was just able to get one entry with 130 lines in the index and sourcetype defined by the add-on. It would help if I could split at the end of every line..
I've tried to define the sourcetype in porps.conf with line breaker and some other regex params. and at this point I don't know how to move on.
Data sample:
1 UserID,Profile,Role1,Role2,Licenses,Programs,Domain,FieldX
2 user139,Profile description,Role 1,Role 2,"lic1,lic2,lic3,lic4,lic5,lic6",protram,domain,extra_field
.
.
130 user139,Profile description,Role 1,Role 2,"lic1,lic2,lic3,lic4,lic5,lic6",protram,domain,extra_field
I've tried to reproduce the content as best as I could, included spaces. The content between the quotes "", all belong to the header "licenses".
