Getting Data In

Splunk field extractor ignors comma towards the end

termcap
Path Finder

I have a CSV with the following data

 

19,john doe,blue car,NAY,NA,YAY,,NIL,,,,NA,,

 

There are 14 fields in the above line, but when I try the automatic field extractor via "Extract more fields", It only recognizes 13 fields.

fx1.JPGfx2.JPG

Why is the field extractor dropping the last field ?

Labels (2)
0 Karma
Get Updates on the Splunk Community!

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...