Getting Data In

csv files with variable structure - how to input ?

flyingpiglet
Engager

Hi,
There is a task to index csv structured files where the structure depends on one or several fields. For example in one file you may have:

Blockquote
field1,field2,keyfield1,field3,...,fieldN
field1,field2,keyfield2,anotherfield3,anotherfield4,...,anotherfieldM
Blockquote

Each record set and length can be completely different except first common fields and keyfields, which we know. We also know the headers set for each keyfield.
Is there a way to help splunk automatically index the files depending on the keyfield value?

Thank you!
Alex

Tags (3)
0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...