Getting Data In
Highlighted

extra blank lines in scheduled search csv

Contributor

Since recently completing the upgrade of our search head to 8.0.0, a schedule search that emails and attached csv is now adding an extra line between every event. Some of our scheduled csv's are used by other automation, so the extra lines are breaking something.

Is this a known issue that was fixed in 8.0.1? I see in the 8.0.1 "Fixed Issues" this: SPL-176009, SPL-166728 - Alert email spacing issue, but I don't know how to look up what the specific issues are to know if that relates to my problem or not.

0 Karma
Highlighted

Re: extra blank lines in scheduled search csv

SplunkTrust
SplunkTrust

There is no way for Splunk users to look up details about SPLs. Contact your account team for help with that.
Or you could install 8.0.1 on your Dev instance to see if it fixes the problem.

---
If this reply helps you, an upvote would be appreciated.
0 Karma
Highlighted

Re: extra blank lines in scheduled search csv

Contributor

This was corrected when we upgraded to 8.0.3.

View solution in original post

0 Karma