Getting Data In

extra blank lines in scheduled search csv

DaClyde
Contributor

Since recently completing the upgrade of our search head to 8.0.0, a schedule search that emails and attached csv is now adding an extra line between every event. Some of our scheduled csv's are used by other automation, so the extra lines are breaking something.

Is this a known issue that was fixed in 8.0.1? I see in the 8.0.1 "Fixed Issues" this: SPL-176009, SPL-166728 - Alert email spacing issue, but I don't know how to look up what the specific issues are to know if that relates to my problem or not.

0 Karma
1 Solution

DaClyde
Contributor

This was corrected when we upgraded to 8.0.3.

View solution in original post

0 Karma

DaClyde
Contributor

This was corrected when we upgraded to 8.0.3.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

There is no way for Splunk users to look up details about SPLs. Contact your account team for help with that.
Or you could install 8.0.1 on your Dev instance to see if it fixes the problem.

---
If this reply helps you, an upvote would be appreciated.
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!