Getting Data In

Why an extracted CSV sent over email is line breaking at 990th character and how to change this setting?


I'm extracting a CSV and sending it over email. The extracted CSV sometimes contains lines whose length is greater than 990 characters (including commas, quotes etc. in csv).
In the received CSV lines with length > 990 characters are broken and a "!\r\n" (exclamation followed by line break) is being inserted at character #991.
This renders the CSV un-parsable by, say, excel.

Has anyone run into similar problem and found a solution for this.

I've gone through limits.conf and I'm not able to locate any relevant setting in it.

PS: I do not have an option to reduce the number of characters in a line.

0 Karma


Did you already find the solution? I figured out this:

This might have something to to how a email-client (splunk, is calling a mail server.
Sometimes it make sense to encode attachements in base64 like recommended here:

I found the place where splunk is encoding the attachment when it is sent by email:

if not len(results) == 0 and len(''.join(results[0].keys())) > EMAIL_CSV_HEADER_CHAR_LIMIT:

It seems that splunk is just encoding in base64 when the csv header is greater that 900 chars (see condition len(''.join(results[0].keys())) > EMAIL_CSV_HEADER_CHAR_LIMIT) .

When I modify the script like that (see condition below), the csv file attached to an email is not containing carriage returns after 990 chars:

if not len(results) == 0:


Yes, I have the same problem and I'm looking for a solution

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Unified Identity - Now Available for Existing Splunk ...

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t ...

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...